The problem that others were trying to point out is that if you enable
SMTP AUTH across the board, no other mail servers on the Internet will
be able to deliver mail to any mailbox on the server since they too
would have to authenticate with credentials that they don't possess.
For a mail server to receive email from other mail servers, it has to
have unauthenticated delivery to local domains running on port 25.
So, unless you're just trying to exchange email amongst users all on
this server (doubtful), you'll have to leave that open.
If the issue is spam then you need filtering, not authentication.
On Apr 17, 2008, at 11:33 AM, MrOzone wrote:
Ok that's good. But the problem that I'm seeing is someone
externally can connect to this box and spam to our local domain. But
to spam through this box you need to auth. Is it possible I am just
missing a setting to say sendine internaly or externally needs to
auth?
Thanks,
William
On Thu, Apr 17, 2008 at 8:41 AM, Jay Lee <[EMAIL PROTECTED]> wrote:
MrOzone wrote:
Im having a bit of trouble trying to configure smtp so Im not a
open relay to send email externally but also internally too.
I have a server setup for users on the outside to send email
through it, but im trying to configure it so that everyone needs to
do smtp authentication except 1 ip range. Is this possible?
Users do need to smtp auth to send email through it, but the
biggest problem is spammers can connect to it and spam our company
(to send to our local domain you dont need to smtp auth).
Requiring smtp auth to relay is the default for Courier. You can
add a range of IP's that are always allowed to relay by modifying
the smtpaccess file. See the man page at:
http://www.courier-mta.org/makesmtpaccess.html
for details on the format of smtpaccess files and the making the
data file. My suggestion though is to require auth for relaying on
all but the dumbest of smtp clients which don't support smtp
authentication (i.e. leave the smtpaccess file as a last ditch
workaround).
Jay
--
Jay Lee
Network/Systems Administrator
Information Technology Department
Philadelphia Biblical University
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save
$100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-
users
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
