Re: SMTP relay host

2009-09-21 Thread Kevin Bailey
Martin Allan Jensen wrote: Hi all, The company I work for have approximately nine mail servers, including Postfix, qmail, sendmail and exim. They would like to make ONE SMTP relay host server so that all their customers can use their SMTP server to send mail through. The customers already

Re: SMTP relay host

2009-09-20 Thread Stan Hoeppner
Martin Allan Jensen put forth on 9/19/2009 8:06 AM: Hi all, The company I work for have approximately nine mail servers, including Postfix, qmail, sendmail and exim. They would like to make ONE SMTP relay host server so that all their customers can use their SMTP server to send mail through

SMTP relay host

2009-09-19 Thread Martin Allan Jensen
Hi all, The company I work for have approximately nine mail servers, including Postfix, qmail, sendmail and exim. They would like to make ONE SMTP relay host server so that all their customers can use their SMTP server to send mail through. The customers already get their incoming mail

Re: SMTP relay host

2009-09-19 Thread Sven Hoexter
On Sat, Sep 19, 2009 at 03:06:29PM +0200, Martin Allan Jensen wrote: Hi, They would like to make ONE SMTP relay host server so that all their customers can use their SMTP server to send mail through. The customers already get their incoming mail through their mail servers. I fail to see

Re: SMTP relay host

2009-09-19 Thread Martin Allan Jensen
Sven Hoexter wrote: Does that mean that those customers run their mailserver on dynamic IP addresses? Otherwise I'd use the IP address/domain of the customers as the criteria. Sven Hi Sven, Yes, I'm sorry, forgot to give that information. They might be running dynamic IP adresses/domains,

Re: SMTP relay host

2009-09-19 Thread Sahil Tandon
On Sat, 19 Sep 2009, Martin Allan Jensen wrote: The company I work for have approximately nine mail servers, including Postfix, qmail, sendmail and exim. They would like to make ONE SMTP relay host server so that all their customers can use their SMTP server to send mail through

Re: SMTP relay host

2009-09-19 Thread Martin Allan Jensen
Sahil Tandon wrote: You must setup SASL and only let authenticated users relay through this new server. Forget about contacting the other mail servers to verify that the sender email exists; that is in no way a form of authentication. http://www.postfix.org/SASL_README.html You are probably

Re: SMTP relay host

2009-09-19 Thread Justin C. Le Grice
Martin Allan Jensen wrote: Hi all, The company I work for have approximately nine mail servers, including Postfix, qmail, sendmail and exim. They would like to make ONE SMTP relay host server so that all their customers can use their SMTP server to send mail through. The customers already

Re: SMTP relay host

2009-09-19 Thread Ansgar Wiechers
On 2009-09-19 Martin Allan Jensen wrote: The company I work for have approximately nine mail servers, including Postfix, qmail, sendmail and exim. They would like to make ONE SMTP relay host server so that all their customers can use their SMTP server to send mail through. The customers

Re: SMTP relay host

2009-09-19 Thread Martin Allan Jensen
Ansgar Wiechers wrote: You could put your customers on a private network not accessible by the public (and I mean VPN kind of private here rather than RFC 1918 kind of private). However, that's just moving authentication and encryption to a different layer. Why do you want to avoid using SASL

Re: SMTP relay host

2009-09-19 Thread Michael Orlitzky
Martin Allan Jensen wrote: SASL and VPN would mean that all customers would need a separate account for their outgoing mail, and that would be a too big project to go ahead with. As most of their servers is BlueOnyx it is not really possible to make a centralized user / password database.

Re: SMTP relay host

2009-09-19 Thread Martin Allan Jensen
Michael Orlitzky wrote: If your customers have POP3/IMAP accounts, there is already a database of usernames and passwords *somewhere*. Query that. Yes there is - actually there is about six different ones - so making a system that could talk to all those authentication mechanisms would

Re: SMTP relay host

2009-09-19 Thread Egoitz Aurrekoetxea Aurre
Hi, Just create sasl account for allowing to relay to those authenticated users. But be very careful on what you're users send though it because if you're custommers start sending mail considered spam in two weeks or less you're outgoingn servers are dead because no server will want to

Re: SMTP relay host

2009-09-19 Thread Paul Beard
On Sep 19, 2009, at 7:30 AM, Martin Allan Jensen mar...@deamon.dk wrote: Yes there is - actually there is about six different ones - so making a system that could talk to all those authentication mechanisms would take me years to develop. That's why I am looking for something simpler.

Re: SMTP relay host

2009-09-19 Thread Michael Orlitzky
Martin Allan Jensen wrote: Michael Orlitzky wrote: If your customers have POP3/IMAP accounts, there is already a database of usernames and passwords *somewhere*. Query that. Yes there is - actually there is about six different ones - so making a system that could talk to all those

Re: SMTP relay host

2009-09-19 Thread Egoitz Aurrekoetxea Aurre
This option : I was just thinking about another option. I might be able to make a small program that analyzes the logfiles for each server, puts it in a database with a timestamp, and then make it a POP/IMAP before SMTP. That would be secure enough right? Is not valid for doing all

Re: SMTP relay host

2009-09-19 Thread Martin Allan Jensen
Egoitz Aurrekoetxea Aurre wrote: Is not valid for doing all you're customers mail machines to connect to a relayhost, because machines connecting to relay host smtpd server are not doing any pop against nothing. Take a list of users in all databases, do a small table in mysql set the primary

Re: SMTP relay host

2009-09-19 Thread Egoitz Aurrekoetxea Aurre
No matter where they are... do a script that takes users from wherever they are and dump them to a file... later find differences between the last file you dumped and from within just dumped then just do INSERT or UPDATE of those users... it's important not to load databases... so only