On Tue, May 02, 2000 at 12:25:14PM -0500, Jeff Hayward wrote:
> On Tue, 2 May 2000, Gareth Harper wrote:
>
> 1) His first requirement was to only allow relaying if the user had one
> of his hosted domains as the From: line of an email. I've told him what
> a bad idea this is but there's no persuading. So is there anyway to do
> this but only when the mail has to be relayed? I'd guess we'd need a
> patch to smtpd. Please don't tell me what a bad idea this is - I know.
> But orders are orders.
>
> Warning: brain damage detected. You will instantly be listed in ORBS, and
> will likely also be frequently abused by relay-rapers.
"Only allow relaying if the user has one of his hosted domains as the From:
line of an email" is not necessarily the same as "Allow relaying if the user
has one of his hosted domains as the From: line of an email." Relaying could be
restricted the conventional way, i.e. by IP address, and there could be a
further requirement that the mail show the proper From address. The "only" in
Gareth's message is placed a little ambiguously, so I don't know which he
meant.
I think this still indicates brain damage, just a different kind of brain
damage. It's the kind of brain damage that means you can't use a pobox.com
address, or an address with another ISP's domain (which ISP you use sometimes
but don't happen to be connected to right now), or an address with your
employer's domain, or an address with your own personal domain, or any other
address but the one your ISP assigns you. If this were my ISP, I'd drop it in
an instant, both for this policy and for the general level of cluelessness it
indicates.
Chris
