Hi,

Couple of questions about sendmail.  I enabled SMTP AUTH (using the
Cyrus SASL and PLAIN and LOGIN methods) on a stock Red Hat 7.1
Sendmail 8.11.  The LOGIN works fine for local users relaying mail
through the company server, except for a couple of issues.

First off, I also need to enable STARTTLS in order not to have
passwords transmitted in clear-text over the wire.  However, STARTTLS
appears to require a certificate on the client side, and self-signed
client side certificates don't seem to work, especially with Outlook
clients.  Nor with Netscape Messenger either, for that matter.  Any
tips on getting STARTTLS to work with self-signed certificates?  I've
read most of the standard docs which Google threw up, with no joy
forthcoming.

Secondly, is there any way to tell sendmail that if, e.g user ``raju''
logs in using SMTP AUTH then it should only relay messages which come
from that client AND which have ``[EMAIL PROTECTED]'' as the sender
address?  In other words, even with SMTP AUTH enabled the sender can
choose any envelope sender and make the message appear to be from
another person.  PGP, GPG and S/MIME aren't options, since most of the
mail recipients aren't clued in enough to be able to figure out what a
signature is or distinguish a good signature from a bad one, so we
need to be able to configure Sendmail to check and reject messages
with forged envelopes.

TIA,

-- Raju
-- 
Raju Mathur          [EMAIL PROTECTED]           http://kandalaya.org/
                     It is the mind that moves

_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to