Not a rant. Different function.

I agree, Relay for Local users is not good. But, that code is not called for
incoming mail, only for relayed mail. And that code is not sufficient to fix
the problem, as it ONLY checks for a valid username.

Instead, what is required is a better combination of "validity" of users and
incoming mail: SMTP AUTH if any valid email address is used outside the
local zone (not just for relayed mail, but also for incoming mail),
rejection of any email with non-valid but local domain (from any zone).

Although Kami was only wanting the name to exist (which will help a small
amount, not much and not for long), fixing incoming mail to require SMTP
AUTH (or whitelisted IP address) for all users with local domain names would
eliminate that type of spam (and just make it a little easier to trap such
coming in and make it a little less likely Joe down the hall opens the nice
trojan horse program he thinks came from the network admin to install the
latest MS Security update).

K

> -----Original Message-----
> From: Sanford Whiteman
>
> > Yes, exactly, that is a relay only check. Complete unrelated, here.
>
> Totally  related.  Don't  turn  my  flame  on and please think further
> before going on a redundant rant.
>
> The  concept of checking for valid senders on local domains during the
> envelope  is  ALREADY implemented, not theoretical. That is the point,
> completely on-point because if it were NOT implemented ANYWHERE in the
> code,  it  would understandably be a longer wait for the capability to
> be  made  an  independent  SMTP  security  option.  Both  Bill  and  I
> understand  that the fact that it's embedded in a bad relay option has
> no implementable use at this time, but it forms a pointer for a vendor
> to  say,  "Yes,  I  can  see  how  we could expand that functionality"
> instead of "We don't have any way of doing that at any time."
>

---
[This E-mail scanned for viruses by Declude Virus]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to