Re: forcing authenticated users to use port 587?

2009-01-09 Thread Jorey Bump
Sahil Tandon wrote, at 01/08/2009 11:37 PM: Jeff Weinberger wrote: Also you noted: In the final step of my scenario, that's the behavior I want to achieve. Will that simple step work? Yes. You can completely disable submission on port 25 and prevent relaying to destinations you don't

Re: forcing authenticated users to use port 587?

2009-01-09 Thread mouss
jeff_homeip a écrit : Thanks for pointing it out - I've read it several times already. ORIGINATING is not mentioned at all in MILTER_README. And while I'm sure the postconf(5) brief explanation is meaningful to you, it means nothing to me. As I noted, I am completely unfamiliar

Re: forcing authenticated users to use port 587?

2009-01-08 Thread Chris Babcock
On Wed, 7 Jan 2009 21:10:57 -0800 Jeff Weinberger j...@jweinberger.homeip.net wrote: 1) using the controls in postfix, is it possible to prevent authenticated users from using port 25 to submit mail? Is there a construct that would do that without interfering with incoming mail from

Re: forcing authenticated users to use port 587?

2009-01-08 Thread Jorey Bump
Jeff Weinberger wrote, at 01/08/2009 12:10 AM: Hi: Based on good practice and the help and urging of some of the gurus on this list, I am moving my users to using the submission service (port 587) instead of port 25 to send mail from their mail clients. Once most of them move, I'd like to

Re: forcing authenticated users to use port 587?

2009-01-08 Thread Jorey Bump
Chris Babcock wrote, at 01/08/2009 03:19 AM: On Wed, 7 Jan 2009 21:10:57 -0800 Jeff Weinberger j...@jweinberger.homeip.net wrote: 1) using the controls in postfix, is it possible to prevent authenticated users from using port 25 to submit mail? Is there a construct that would do that

Re: forcing authenticated users to use port 587?

2009-01-08 Thread Jeff Weinberger
On Jan 8, 2009, at 5:49 AM, Jorey Bump wrote: Jeff Weinberger wrote, at 01/08/2009 12:10 AM: Hi: Based on good practice and the help and urging of some of the gurus on this list, I am moving my users to using the submission service (port 587) instead of port 25 to send mail from their mail

Re: forcing authenticated users to use port 587?

2009-01-08 Thread Jorey Bump
Jeff Weinberger wrote, at 01/08/2009 09:27 AM: Setting smtpd_sasl_auth_enable = no would mean that no authentication is required on port 25, but if I understand it correctly, it wouldn't actually stop an authenticated user from sending mail through port 25. If they tried to authenticate on

Re: forcing authenticated users to use port 587?

2009-01-08 Thread Jeff Weinberger
On Thu, 08 Jan 2009 09:53:45 -0500, Jorey Bump l...@joreybump.com wrote: Jeff Weinberger wrote, at 01/08/2009 09:27 AM: Setting smtpd_sasl_auth_enable = no would mean that no authentication is required on port 25, but if I understand it correctly, it wouldn't actually stop an authenticated

Re: forcing authenticated users to use port 587?

2009-01-08 Thread mouss
Jeff Weinberger a écrit : Hi: Based on good practice and the help and urging of some of the gurus on this list, I am moving my users to using the submission service (port 587) instead of port 25 to send mail from their mail clients. Once most of them move, I'd like to start warning the

Re: forcing authenticated users to use port 587?

2009-01-08 Thread Jeff Weinberger
On Jan 8, 2009, at 6:53 AM, Jorey Bump wrote: Jeff Weinberger wrote, at 01/08/2009 09:27 AM: Setting smtpd_sasl_auth_enable = no would mean that no authentication is required on port 25, but if I understand it correctly, it wouldn't actually stop an authenticated user from sending mail

Re: forcing authenticated users to use port 587?

2009-01-08 Thread Sahil Tandon
Jeff Weinberger wrote: I noticed that on several occasions, and in the default master.cf: -o milter_macro_daemon_name=ORIGINATING is suggested for the submission service. I'm not familiar with Milters and can't find information on what this is or what this does (at least in my search

Re: forcing authenticated users to use port 587?

2009-01-08 Thread jeff_homeip
--- In post...@yahoogroups.com, Sahil Tandon sa...@... wrote: Jeff Weinberger wrote: I noticed that on several occasions, and in the default master.cf: -o milter_macro_daemon_name=ORIGINATING is suggested for the submission service. I'm not familiar with Milters and can't find

forcing authenticated users to use port 587?

2009-01-07 Thread Jeff Weinberger
Hi: Based on good practice and the help and urging of some of the gurus on this list, I am moving my users to using the submission service (port 587) instead of port 25 to send mail from their mail clients. Once most of them move, I'd like to start warning the ones who don't that they