Hi George,

As others have already explained, ASSP has nothing to do with POP.  ASSP 
only sits between your incoming connection and your SMTP port.  In your 
case, you are using Merak, and have been using Pop before SMTP to perform 
relay authentication.  I had been doing the same thing.  I agree - the 
documentation for this is a bit confusing; I just havent had the chance to 
write better docs on it yet.

Basically, someone (I can't remember the name offhand) has written a 
function in ASSP to parse Merak's data file which contains the pop 
authentication information for pop before smtp.  This is the file that you 
need to point to in ASSP's Popb4SMTP.  I'm not sure what version of Merak 
you are using, but it appears that the file format has not changed from 7.x 
up to 8.0.3 (the latest version I tested against).  I don't know if the 
format has changed afterwards, but I don't see why it would.  Everytime you 
check your Pop mail, Merak updates that data file.  If you point to the 
proper file, and enable the feature in ASSP, when your client connects to 
ASSP to send email, ASSP will verify the sender's address against the data 
in that file.  If the sender's address is there, then ASSP will allow 
relaying for that particular email.  If it isn't, then ASSP will disallow 
relaying for that user.

It is rather straight forward, once you get the hang of it.  It took me a 
little while at first too.

Just as a note, since moving to ASSP, I have forced all my users to move to 
SMTP authentication instead.  It is much easier to handle, more 
standardized, and allows for more flexibility.  Basically, I gave all my 
users a document how to enable SMTP authentication, explaining that it was 
part of a spam-fighting implementation and gave them a few weeks to make the 
migration.  Then I created a rule in Merak that would automatically remind 
any user that was sending mail without authentication that they had to 
enable authentication.  Final step was to give all users a final countdown - 
ie: you have 3 days left to enable smtp authentication - you have 2 days 
left... etc.  Gave a final 2 day grace period and shut off pop before smtp 
altogether.  I was amazed; no one complained after it was disabled.  I had a 
few emails / calls beforehand, but nothing huge.  And for anyone who might 
be away during that timeframe, they still had access to download their pop 
email (doesn't affect pop at all), and read the instructions there.

If you have any questions, just ask.

Good luck.

Eric






-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to