On 2016-02-21 12:34, Kiss Gábor wrote:
My colleagues need authenticated channel to submit mails when
traveling.
So disabling sasl is not an option.
read again i just say disalbe it on port 25
and convense users to use submission port 587, or 465 as users se fits
And I have to receive mails on
ports as much as possible due to restrictive hotel/airport/etc
firewalls.
i still have to see that problem
(No, VPN is not used by all of them. So address based authentication
cannot be mandatory.)
VPN makes it much harder on the server imho
rfc 1918 vs permit mynetworks, possible open relay, it would be as safe
as pop before smtp
In general it is unlikely my boss permits me to reform our policies.
:-)
if he even understand me it would be nice :=)
Thanks for everybody for responses.
The problem is already solved by Allen Coates. :-)
what problem ?