[swinog] Bluewin SMTP Policy

2008-06-13 Diskussionsfäden Roger Schmid
Dear Swinog members Until now, we provided an authenticated smtp-server for our customers and a separate open smtp-server for customers with email-adresses from other providers. We would like to shut down the relaying server and have the customers use the smtp-servers from their mail-provider

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Diskussionsfäden Jeroen Massar
Roger Schmid wrote: Dear Swinog members Until now, we provided an authenticated smtp-server for our customers and a separate open smtp-server for customers with email-adresses from other providers. We would like to shut down the relaying server and have the customers use the smtp-servers from

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Diskussionsfäden Adrian Ulrich
Hi Roger, Now we found out that bluewin doesn't allow authenticated smtp-relay from users outside their ip-range, so all our customers with bluewin-mailadresses would have no smtp-server available. That's not entirely correct: smtpauth.bluewin.ch will relay mails from non-bluewin-ip-ranges

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Diskussionsfäden Roger Schmid
On Fri, Jun 13, 2008 at 10:13 AM, Adrian Ulrich [EMAIL PROTECTED] wrote: Hi Roger, Now we found out that bluewin doesn't allow authenticated smtp-relay from users outside their ip-range, so all our customers with bluewin-mailadresses would have no smtp-server available. That's not entirely

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Diskussionsfäden Roger Schmid
On Fri, Jun 13, 2008 at 10:52 AM, Jeroen Massar [EMAIL PROTECTED] wrote: Roger Schmid wrote: [..] Otherwise spammers would open 100th's of free accounts and use them to send spam from non-bluewin IPs :-/ I see the problem, but perhaps something like a captcha would also be sufficient to

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Diskussionsfäden Rainer Duffner
Jeroen Massar schrieb: Just display the captcha from the signup on $pornsite, a person will fill it in for you, captcha bypassed. If it is interesting and cheap for then to abuse it, they will. Do you have a current, working example for that? (Just for research purposes, of course) ;-

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Diskussionsfäden Roger Schmid
On Fri, Jun 13, 2008 at 10:58 AM, Jeroen Massar [EMAIL PROTECTED] wrote: Roger Schmid wrote: On Fri, Jun 13, 2008 at 10:52 AM, Jeroen Massar [EMAIL PROTECTED] wrote: Just display the captcha from the signup on $pornsite, a person will fill it in for you, captcha bypassed. If it is

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Diskussionsfäden Jeroen Massar
Rainer Duffner wrote: Jeroen Massar schrieb: Just display the captcha from the signup on $pornsite, a person will fill it in for you, captcha bypassed. If it is interesting and cheap for then to abuse it, they will. Do you have a current, working example for that? (Just for research

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Diskussionsfäden Adrian Ulrich
Hi, Thank you for clearing this up. So we have to give bluewin-users with free bluewin mail-accounts an smtp-account on our servers I think. Well, they could call our helpdesk and ask them to disable the 'Restricted IP-Range' feature for a specific mailaccount. Our helpdesk will disable it

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Diskussionsfäden Simon Leinen
Jeroen Massar writes: Just display the captcha from the signup on $pornsite, a person will fill it in for you, captcha bypassed. If it is interesting and cheap for then to abuse it, they will. The approach is mentioned in an excellent talk by Louis von Ahn, who invented the CAPTCHA: