Re: forcing SMTP authentication

2019-08-21 Thread Selmeci Tamás
> That last rule is essentially "accept from any for (pretty much) any" so > you have created an open relay. > > Replace the "from any" with "from local" so the rule reads as: > >accept from local for ! domain 486.hu relay via > tls+auth://t-onl...@mail.t-online.hu

Re: forcing SMTP authentication

2019-08-21 Thread Selmeci Tamás
On Wed, 21 Aug 2019 06:50:05 + Lévai, Dániel wrote: > No it doesn't, that's the whole point... Very strange. Currently I'm in the office, the mail server is at home. I tried with two mail clients (sylpheed, Evolution) with a fake account to use the mail server without authentication to

Re: forcing SMTP authentication

2019-08-21 Thread Martijn van Duren
On 8/21/19 8:47 AM, Selmeci Tamás wrote: > On Wed, 21 Aug 2019 08:19:24 +0200 Martijn van Duren > wrote: > >> From smtpd.conf(5): >> >> auth-optional [] >> Support SMTPAUTH optionally: clients need not >> authenticate, but may do so. This

Re: forcing SMTP authentication

2019-08-21 Thread Lévai , Dániel
No it doesn't, that's the whole point... Eredeti üzenet Be 2019. aug. 21. 8:47, Selmeci Tamás írta: > On Wed, 21 Aug [2019 08](tel:201908):19:24 +0200 Martijn van Duren > wrote: > >> From smtpd.conf(5): >> >> auth-optional [] >> Support SMTPAUTH optionally: clients need not >>

Re: forcing SMTP authentication

2019-08-21 Thread Selmeci Tamás
On Wed, 21 Aug 2019 08:19:24 +0200 Martijn van Duren wrote: > From smtpd.conf(5): > > auth-optional [] > Support SMTPAUTH optionally: clients need not > authenticate, but may do so. This allows a listen on > directive

Re: forcing SMTP authentication

2019-08-21 Thread Marcus MERIGHI
Hello Selmeci, you are operating an open mail relay at the moment. stop it, now! it won't take long until "they" discover and abuse it and this will ruin the reputation of your IP address for quite some time. (look in you logs for messages from/to "max@"!) handle transfer of mails between

Re: forcing SMTP authentication

2019-08-21 Thread Martijn van Duren
>From smtpd.conf(5): auth-optional [] Support SMTPAUTH optionally: clients need not authenticate, but may do so. This allows a listen on directive to both accept incoming mail from untrusted senders

Re: forcing SMTP authentication

2019-08-21 Thread mailinglists
Hello Selmeci, Corection: I accept e-mail for delivery on one port, and for relay with authentication on another. It seems to me that you need to specify auth in the listen directive for requiring authentication for incoming connections. >From what I can tell you are authenticating with the

Re: forcing SMTP authentication

2019-08-21 Thread mailinglists
Hello Selmeci, It seems to me that you need to specify auth in the listen directive for requiring authentication for incoming connections. >From what I can tell you are authenticating with the smarthost, but not for incoming connections. Example from man smtpd.conf: listen on