Oh, I see... you mean that the client never has to provide authentication
data. If it does, the data gets attached to the mail. Then a matcher can
check whether it needs authentication and check if the appropriate data is
present and valid or not. Right? Excuse me for not thinking properly.

Regards,
Thomas

> -----Original Message-----
> From: Noel J. Bergman [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, July 31, 2002 3:50 PM
> To: James Developers List
> Subject: RE: Open relay with SMTP-AUTH
>
>
> Thomas,
>
> I don't believe that it is necessary to configure the SMTPHandler
> that way.
> What you want to do would be configured through appropriate
> matchers/mailets.  To require AUTH regardless of circumstance, you would
> turn on authRequired.  To require AUTH for relaying by non-local IP, you
> would use a matcher that checked for authorized mail if it failed the IP
> check.  This is the JAMES philosophy: building blocks with appropriate
> infrastructure.
>
>       --- Noel
>
>
> --
> To unsubscribe, e-mail:
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
>
>


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to