On Fri, Jul 11, 2003 at 11:03:46AM -0500, Len Conrad wrote:
> halts? do you mean halt as "stop then start".  It says "delay" between 
> multiple RCTP TO: within a single SMTP session.  NOTHING about halting.

Sorry, I did mean that it seems to delay all SMTP processes.

> Applied to all SMTP session, "should" not be a pb since 99+% of all SMTP 
> sessions have one RCTP TO: so there's nothing to apply the delay to.

... except if we endup in the DoS situation again, where other SMTP
connections will now be affected instead of the Web mail and other processes
on the server. Not a big deal, but it degrades the service.

> ok,  that's another benefit of IMGate doing the same.  Note that big doses 
> of mail from your SMTP gateway will cause IMail to "refuse connection" 
> temporarily, actually mixing "accept connection" with "refuse connection", 
> causing the SMTP gateway to defer.  It msg will probably be accepted by 
> Imail next attempt.

I'll have to investigate this... we're pumping a light load of 14k/day of
messages into it, and I cant say I've noticed a problem with queueing yet.

> Bennett Todd's pop-before-smtp works well.  This avoids exporting the 
> passwords from Imail to the SMTP gateway.

Mmm, there are the usual issues with using pop-before-smtp, such as mail
clients sending before downloading POP mail - it doesnt look good for the
customers getting error messages. Also, what if it's a server sending
messages and a separate fetchmail-like client? Getting them co-ordinated is
a fiddle for customers.

Also, you'd have to run the log scanner on the IMail server and somehow
export the cached logins to the Auth SMTP processes on another server or
SQL database.

> >It would require some form of
> >daemon to authenticate against the registry entries.
> 
> nah, too complicated.

It's actually pretty simple - especially if you've ever read the bugtraq
thread on how to decode IMail passwords ;-) A simple SSL-protected daemon
running on IMail could say yes or no. It's easy to check on the AuthSMTP
server if the usernames belong to IMail, since they're the full e-mail
address.

-- 
Jon Miles <[EMAIL PROTECTED]>
Cybah on IRC(net)

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to