Re[2]: [vchkpw] SMTP Authenticaton

2008-04-12 Thread Ismail YENIGUL
Wouter,

If you still want to try smtp auth on the different server.
You can install vpopmail on the smtp auth server with the same config
on your mail server. And you can define the remote vpopmail
db(mysql or pgsql) in your smtp auth server vpopmail.mysql file.
So you don't have to define the domains in the smtp auth server.
I am already using this configuration at one of our customers without
any problem.


Thanks.

Saturday, April 12, 2008, 8:33:22 AM, you wrote:

 Hi,

 Thank you for your suggestions. I have implemented it in the same way you
 have
 seems to work now :)

 Thanks again and have a nice weekend.

 - Wouter

 - Original Message - 
 From: Tonix (Antonio Nati) [EMAIL PROTECTED]
 To: vchkpw@inter7.com
 Sent: Thursday, April 10, 2008 4:56 PM
 Subject: Re: [vchkpw] SMTP Authenticaton


 Tonix (Antonio Nati) ha scritto:

 I guess you use vpopmail.
 Sorry for the stupid deduction, I confused this mailing list with the 
 general qmail mailing list :-).

 Tonino
 If you use chkuser patch (on for qmail/vpopmail), or Shupp's toaster 
 which includes chkuser, you can force a server to accept only 
 authenticated sessions. So, you can set up a dedicated port (like the 
 submission port) or a dedicated IP only for this purpose.

 See http://www.interazioni.it/opensource/chkuser/ for more details.

 Tonino

 Wouter van der Schagt ha scritto:
 My apologies, you already mentioned it.. by firewall restriction.

 Another question.. spammers could still connect if they knew they were 
 supposed
 to connect to port 587 am i correct? Or did you find a way around this 
 as well?

 Thanks
 - Wouter

 - Original Message - From: Alastair Battrick [EMAIL PROTECTED]
 To: vchkpw@inter7.com
 Sent: Thursday, April 10, 2008 4:39 PM
 Subject: Re: [vchkpw] SMTP Authenticaton


 Wouter van der Schagt wrote:
 An option for us to setup a different server that only handles smtp 
 functionality for our client, however the problem then is that a
 domain needs to exist on two servers. one for the popbox and one for
 smtp authentication to work. Or is it possible for the vpopmail to
 connect to the database on the other mailserver for authentication or
 would that be too slow? Does anybody have any other suggestions
 perhaps?

 Hi Wouter

 I ran into this same problem. I got around it by creating a SMTP
 submission port that accepts SMTP Auth emails into the server on port 
 587. Port 25 only accepts messages from our spam appliance by firewall 
 restriction.

 Each mail client has to be set to use port 587 and SMTP Auth of course.
 -- 
 Alastair Battrick












 -- 
 
[EMAIL PROTECTED]Interazioni di Antonio Nati 
 http://www.interazioni.it 
 @interazioni.it   
 


 

 


 




-- 

Ismail YENIGUL
Yönetici/Manager
Servis ve Destek Bölümü/System Services and Support Division
Tel: +90 216-470 94 23
Fax: +90 216-470 95 08
http://www.endersys.com.tr


!DSPAM:4800fed4120501759827712!



Re: [vchkpw] SMTP Authenticaton

2008-04-11 Thread Wouter van der Schagt

Hi,

Thank you for your suggestions. I have implemented it in the same way you 
have

seems to work now :)

Thanks again and have a nice weekend.

- Wouter

- Original Message - 
From: Tonix (Antonio Nati) [EMAIL PROTECTED]

To: vchkpw@inter7.com
Sent: Thursday, April 10, 2008 4:56 PM
Subject: Re: [vchkpw] SMTP Authenticaton



Tonix (Antonio Nati) ha scritto:


I guess you use vpopmail.
Sorry for the stupid deduction, I confused this mailing list with the 
general qmail mailing list :-).


Tonino
If you use chkuser patch (on for qmail/vpopmail), or Shupp's toaster 
which includes chkuser, you can force a server to accept only 
authenticated sessions. So, you can set up a dedicated port (like the 
submission port) or a dedicated IP only for this purpose.


See http://www.interazioni.it/opensource/chkuser/ for more details.

Tonino

Wouter van der Schagt ha scritto:

My apologies, you already mentioned it.. by firewall restriction.

Another question.. spammers could still connect if they knew they were 
supposed
to connect to port 587 am i correct? Or did you find a way around this 
as well?


Thanks
- Wouter

- Original Message - From: Alastair Battrick [EMAIL PROTECTED]
To: vchkpw@inter7.com
Sent: Thursday, April 10, 2008 4:39 PM
Subject: Re: [vchkpw] SMTP Authenticaton



Wouter van der Schagt wrote:
An option for us to setup a different server that only handles smtp 
functionality for our client, however the problem then is that a

domain needs to exist on two servers. one for the popbox and one for
smtp authentication to work. Or is it possible for the vpopmail to
connect to the database on the other mailserver for authentication or
would that be too slow? Does anybody have any other suggestions
perhaps?


Hi Wouter

I ran into this same problem. I got around it by creating a SMTP
submission port that accepts SMTP Auth emails into the server on port 
587. Port 25 only accepts messages from our spam appliance by firewall 
restriction.


Each mail client has to be set to use port 587 and SMTP Auth of course.
--
Alastair Battrick















--

   [EMAIL PROTECTED]Interazioni di Antonio Nati 
http://www.interazioni.it 
@interazioni.it   









!DSPAM:480049af120505079216012!



[vchkpw] SMTP Authenticaton

2008-04-10 Thread Wouter van der Schagt
Dear all,

I have a question. We have a mailserver that only accepts incoming SMTP 
connections
from our anti-spam appliances. So far so good, this is done at the tcpserver 
level. So
default is :deny.

Our clients, however also need SMTP functionality so we've set up the same 
server
with SMTP Authentication, however that wont work, since by default all 
connections
other than those from the Barracuda are blocked. We experimented with pop before
smtp, but those results are not satisfactory either.

The reason we block by default is that sooner or later spammers connect to the
server directly rendering the anti-spam appliances completely useless. (or at 
the
very least ineffective)

An option for us to setup a different server that only handles smtp 
functionality for
our client, however the problem then is that a domain needs to exist on two 
servers.
one for the popbox and one for smtp authentication to work. Or is it possible 
for
the vpopmail to connect to the database on the other mailserver for 
authentication
or would that be too slow? Does anybody have any other suggestions perhaps?

Thanks,

Sincerely,
- Wouter van der Schagt

!DSPAM:47fdd050120507919821043!


Re: [vchkpw] SMTP Authenticaton

2008-04-10 Thread Alastair Battrick

Wouter van der Schagt wrote:
An option for us to setup a different server that only handles smtp 
functionality for our client, however the problem then is that a

domain needs to exist on two servers. one for the popbox and one for
smtp authentication to work. Or is it possible for the vpopmail to
connect to the database on the other mailserver for authentication or
would that be too slow? Does anybody have any other suggestions
perhaps?


Hi Wouter

I ran into this same problem. I got around it by creating a SMTP
submission port that accepts SMTP Auth emails into the server on port 
587. Port 25 only accepts messages from our spam appliance by firewall 
restriction.


Each mail client has to be set to use port 587 and SMTP Auth of course.
--
Alastair Battrick

!DSPAM:47fdd237120501306216291!



Re: [vchkpw] SMTP Authenticaton

2008-04-10 Thread Alastair Battrick

Wouter van der Schagt wrote:

My apologies, you already mentioned it.. by firewall restriction.

Another question.. spammers could still connect if they knew they were 
supposed
to connect to port 587 am i correct? Or did you find a way around this 
as well?


Hi Wouter

Port 587 has SMTP Auth, so although they might be able to connect to the 
daemon, they cannot send email through it.

--
Alastair Battrick
http://www.aj8.org

!DSPAM:47fdd5aa120501200218640!



Re: [vchkpw] SMTP Authenticaton

2008-04-10 Thread Wouter van der Schagt

My apologies, you already mentioned it.. by firewall restriction.

Another question.. spammers could still connect if they knew they were 
supposed
to connect to port 587 am i correct? Or did you find a way around this as 
well?


Thanks
- Wouter

- Original Message - 
From: Alastair Battrick [EMAIL PROTECTED]

To: vchkpw@inter7.com
Sent: Thursday, April 10, 2008 4:39 PM
Subject: Re: [vchkpw] SMTP Authenticaton



Wouter van der Schagt wrote:
An option for us to setup a different server that only handles smtp 
functionality for our client, however the problem then is that a

domain needs to exist on two servers. one for the popbox and one for
smtp authentication to work. Or is it possible for the vpopmail to
connect to the database on the other mailserver for authentication or
would that be too slow? Does anybody have any other suggestions
perhaps?


Hi Wouter

I ran into this same problem. I got around it by creating a SMTP
submission port that accepts SMTP Auth emails into the server on port 587. 
Port 25 only accepts messages from our spam appliance by firewall 
restriction.


Each mail client has to be set to use port 587 and SMTP Auth of course.
--
Alastair Battrick







!DSPAM:47fdd469120501275178592!



Re: [vchkpw] SMTP Authenticaton

2008-04-10 Thread Tonix (Antonio Nati)

Tonix (Antonio Nati) ha scritto:


I guess you use vpopmail.
Sorry for the stupid deduction, I confused this mailing list with the 
general qmail mailing list :-).


Tonino
If you use chkuser patch (on for qmail/vpopmail), or Shupp's toaster 
which includes chkuser, you can force a server to accept only 
authenticated sessions. So, you can set up a dedicated port (like the 
submission port) or a dedicated IP only for this purpose.


See http://www.interazioni.it/opensource/chkuser/ for more details.

Tonino

Wouter van der Schagt ha scritto:

My apologies, you already mentioned it.. by firewall restriction.

Another question.. spammers could still connect if they knew they 
were supposed
to connect to port 587 am i correct? Or did you find a way around 
this as well?


Thanks
- Wouter

- Original Message - From: Alastair Battrick [EMAIL PROTECTED]
To: vchkpw@inter7.com
Sent: Thursday, April 10, 2008 4:39 PM
Subject: Re: [vchkpw] SMTP Authenticaton



Wouter van der Schagt wrote:
An option for us to setup a different server that only handles smtp 
functionality for our client, however the problem then is that a

domain needs to exist on two servers. one for the popbox and one for
smtp authentication to work. Or is it possible for the vpopmail to
connect to the database on the other mailserver for authentication or
would that be too slow? Does anybody have any other suggestions
perhaps?


Hi Wouter

I ran into this same problem. I got around it by creating a SMTP
submission port that accepts SMTP Auth emails into the server on 
port 587. Port 25 only accepts messages from our spam appliance by 
firewall restriction.


Each mail client has to be set to use port 587 and SMTP Auth of course.
--
Alastair Battrick
















--

   [EMAIL PROTECTED]Interazioni di Antonio Nati 
  http://www.interazioni.it  [EMAIL PROTECTED]   




!DSPAM:47fdd62d120501018317444!



Re: [vchkpw] SMTP Authenticaton

2008-04-10 Thread Tonix (Antonio Nati)


I guess you use vpopmail.
If you use chkuser patch (on for qmail/vpopmail), or Shupp's toaster 
which includes chkuser, you can force a server to accept only 
authenticated sessions. So, you can set up a dedicated port (like the 
submission port) or a dedicated IP only for this purpose.


See http://www.interazioni.it/opensource/chkuser/ for more details.

Tonino

Wouter van der Schagt ha scritto:

My apologies, you already mentioned it.. by firewall restriction.

Another question.. spammers could still connect if they knew they were 
supposed
to connect to port 587 am i correct? Or did you find a way around this 
as well?


Thanks
- Wouter

- Original Message - From: Alastair Battrick [EMAIL PROTECTED]
To: vchkpw@inter7.com
Sent: Thursday, April 10, 2008 4:39 PM
Subject: Re: [vchkpw] SMTP Authenticaton



Wouter van der Schagt wrote:
An option for us to setup a different server that only handles smtp 
functionality for our client, however the problem then is that a

domain needs to exist on two servers. one for the popbox and one for
smtp authentication to work. Or is it possible for the vpopmail to
connect to the database on the other mailserver for authentication or
would that be too slow? Does anybody have any other suggestions
perhaps?


Hi Wouter

I ran into this same problem. I got around it by creating a SMTP
submission port that accepts SMTP Auth emails into the server on port 
587. Port 25 only accepts messages from our spam appliance by 
firewall restriction.


Each mail client has to be set to use port 587 and SMTP Auth of course.
--
Alastair Battrick













--

   [EMAIL PROTECTED]Interazioni di Antonio Nati 
  http://www.interazioni.it  [EMAIL PROTECTED]   




!DSPAM:47fdd5d1120501953143563!



Re: [vchkpw] SMTP Authenticaton

2008-04-10 Thread Wouter van der Schagt
Thanks for your reply, how did you configure tcpserver to be selective on 
the ports?

Or what did you put in the /etc/tcp.smtp file?

= Wouter

- Original Message - 
From: Alastair Battrick [EMAIL PROTECTED]

To: vchkpw@inter7.com
Sent: Thursday, April 10, 2008 4:39 PM
Subject: Re: [vchkpw] SMTP Authenticaton



Wouter van der Schagt wrote:
An option for us to setup a different server that only handles smtp 
functionality for our client, however the problem then is that a

domain needs to exist on two servers. one for the popbox and one for
smtp authentication to work. Or is it possible for the vpopmail to
connect to the database on the other mailserver for authentication or
would that be too slow? Does anybody have any other suggestions
perhaps?


Hi Wouter

I ran into this same problem. I got around it by creating a SMTP
submission port that accepts SMTP Auth emails into the server on port 587. 
Port 25 only accepts messages from our spam appliance by firewall 
restriction.


Each mail client has to be set to use port 587 and SMTP Auth of course.
--
Alastair Battrick







!DSPAM:47fdd38d120501382840492!