Re: port 25 465 and 587 confusion.

2015-04-27 Thread Charles Marcus
On 4/6/2015 5:31 AM, Sebastian Nielsen sebast...@sebbe.eu wrote: IMHO I find it better to only allow submission from trusted nets. So, you prefer to cripple your users by not allowing them to send email when outside the office? Better to disable authentication completely, and completely

THREAD CLOSED (was: port 25 465 and 587 confusion)

2015-04-27 Thread Viktor Dukhovni
On Mon, Apr 27, 2015 at 12:36:19PM -0400, Charles Marcus wrote: On 4/6/2015 5:31 AM, Sebastian Nielsen sebast...@sebbe.eu wrote: IMHO I find it better to only allow submission from trusted nets. So, you prefer to cripple your users by not allowing them to send email when outside the

Re: port 25 465 and 587 confusion.

2015-04-06 Thread Muhammad Yousuf Khan
Thanks Noel and Peter i learned alot from both of your posts. by Noel For new installations, it is strongly recommended to require your customers to use port 587 (or 465) and to disable AUTH on port 25. can you please refer any document on this or any link. actually this is what i

Re: port 25 465 and 587 confusion.

2015-04-06 Thread Sebastian Nielsen
: port 25 465 and 587 confusion. On 04/06/2015 08:05 PM, Muhammad Yousuf Khan wrote: By Peter - What you should be, at the very least, encouraging is STARTTLS over port 587. Whether you want to support some very old Outlook clients and offer TLS wrappermode over 465 is up

Re: port 25 465 and 587 confusion.

2015-04-06 Thread Peter
On 04/06/2015 08:05 PM, Muhammad Yousuf Khan wrote: By Peter - What you should be, at the very least, encouraging is STARTTLS over port 587. Whether you want to support some very old Outlook clients and offer TLS wrappermode over 465 is up to you but it is unlikely

Re: port 25 465 and 587 confusion.

2015-04-06 Thread Christian Kivalo
On 2015-04-06 14:27, Muhammad Yousuf Khan wrote: in light of your above suggestions. i enabled smtp inet n - - - - smtpd #smtp inet n - - - 1 postscreen #smtpd pass - - - - - smtpd

Re: port 25 465 and 587 confusion.

2015-04-06 Thread Muhammad Yousuf Khan
...@gmail.com *Sent:* Monday, April 06, 2015 2:27 PM *To:* Peter pe...@pajamian.dhs.org *Cc:* Postfix users postfix-users@postfix.org *Subject:* Re: port 25 465 and 587 confusion. @Peter Right, you really should not be allowing submission on port 25 at all. and is this segregation is a good

Re: port 25 465 and 587 confusion.

2015-04-06 Thread Muhammad Yousuf Khan
@Peter Right, you really should not be allowing submission on port 25 at all. and is this segregation is a good thought of mine or practical? Yes isn't 465 is useless and can i close this if yes then how? That depends on if you have users that have very old versions of Outlook which

Re: port 25 465 and 587 confusion.

2015-04-06 Thread Sebastian Nielsen
that particular ISP. Users outside that network simply has to use their webmail, which does have more protections in form of captchas and such. From: Muhammad Yousuf Khan Sent: Monday, April 06, 2015 2:27 PM To: Peter Cc: Postfix users Subject: Re: port 25 465 and 587 confusion. @Peter

Re: port 25 465 and 587 confusion.

2015-04-05 Thread Noel Jones
On 4/5/2015 12:42 PM, Muhammad Yousuf Khan wrote: Thanks Chirs, Please correct me if i am wrong. just sharing this if my concept is correct. port 25 is to send email b/w mailservers. Yes, port 25 is required for MTA to MTA mail transfer. Opportunistic STARTTLS should be enabled, but must

Re: port 25 465 and 587 confusion.

2015-04-05 Thread Peter
On 04/06/2015 05:42 AM, Muhammad Yousuf Khan wrote: port 25 is to send email b/w mailservers. Correct. if my client(e.g. outlook) wants to send email it must use port 465 and 587 No, it *should* use 587. It is possible to set up port 25 for mail submission but not recommended, that's simply

Re: port 25 465 and 587 confusion.

2015-04-05 Thread Peter
On 04/06/2015 11:33 AM, Peter wrote: Thunderbird, for example, calls TLS wrappermode TLS Correction: Thunderbird calls TLS wrappermode SSL/TLS. Peter

Re: port 25 465 and 587 confusion.

2015-04-05 Thread Viktor Dukhovni
On Sun, Apr 05, 2015 at 06:05:20PM -0500, Noel Jones wrote: Many sites enable port 465 as a convenience to their customers since it doesn't cost anything nor significantly affect security. Other refuse to enable port 465 for philosophical reasons. This could change, there is early stage work

port 25 465 and 587 confusion.

2015-04-05 Thread Muhammad Yousuf Khan
i am working on postfix and very new to it. just trying to learn but need to clear my confusion. i had read alot about all 3 ports and they are confusing me a bit now. please help me to understand conceptually how things are working differently on different ports. my mail server is listening on

Re: port 25 465 and 587 confusion.

2015-04-05 Thread Chris Adams
Once upon a time, Muhammad Yousuf Khan sir...@gmail.com said: now the confusion part is my concept. does port 25 and 465 work together like FTP. port 21 and 20. like 1 port is for negotiate and another port is for data? Port 25 is tradtiotional SMTP, aimed at server-server communications now

Re: port 25 465 and 587 confusion.

2015-04-05 Thread D'Arcy J.M. Cain
On Sun, 5 Apr 2015 19:21:00 +0500 Muhammad Yousuf Khan sir...@gmail.com wrote: now the confusion part is my concept. does port 25 and 465 work together like FTP. port 21 and 20. like 1 port is for negotiate and another port is for data? Thank ${DIETY} that of all the common protocols nothing

Re: port 25 465 and 587 confusion.

2015-04-05 Thread Muhammad Yousuf Khan
Thanks Chirs, Please correct me if i am wrong. just sharing this if my concept is correct. port 25 is to send email b/w mailservers. if my client(e.g. outlook) wants to send email it must use port 465 and 587 for security. port 465 is for SSL Wraped SMTP port but can also be used with TLS