2012/1/11 Kendrick C. Wilson <[email protected]>: > Its a closed system.....
SMTP Authentication will not fix spoofing issue in a close system, too. I can use SMTP credentials for user A and then send an email saying I am user B: SMTP sender and email sender are not the same thing. BTW, if you need to ask authentication to everyone then put "nonexistantdomain.com" as the local domain, so whatever an user try to write as the recipient it will be recognized as non-local and will require authentication. Given the system is "closed" you can then force the LocalDelivery mailet to run without running the UserIsLocal mailet (so you don't check the domain part). Stefano > Kendrick C. Wilson > > >> From: [email protected] >> Date: Wed, 11 Jan 2012 23:53:44 +0100 >> Subject: Re: Issue with James 3.0-beta3 >> To: [email protected] >> >> 2012/1/11 Kendrick C. Wilson <[email protected]>: >> > I am trying to for every sender to authenticate before sending an email. >> >> Makes no sense to me, unless this server is only used for outbound and >> not inbound email. >> >> > It seems if the recipient is local authentication is not required..... >> >> Email protocol doesn't allow to require authentication for local >> recipients. If you could do this no one could send you email from the >> outside world. >> >> > I am trying to prevent email spoofing........ >> >> Then you are trying on the wrong side. Email spoofing is not easy to >> prevent. You can use S/MIME (or GPG) and SPF to do something about it, >> but requiring authentication is not an option. >> >> Stefano >> >> > Kendrick C. Wilson >> > >> > >> >> From: [email protected] >> >> Date: Wed, 11 Jan 2012 23:33:38 +0100 >> >> Subject: Re: Issue with James 3.0-beta3 >> >> To: [email protected] >> >> >> >> 2012/1/11 Kendrick C. Wilson <[email protected]>: >> >> > Is it possible to force auth to local recipients? >> >> >> >> Yes, by not declaring them as local! >> >> >> >> But, why would you need something similar? >> >> >> >> Stefano >> >> >> >> > Kendrick C. Wilson >> >> > >> >> > >> >> >> Date: Wed, 11 Jan 2012 20:30:12 +0100 >> >> >> From: [email protected] >> >> >> To: [email protected] >> >> >> Subject: Re: Issue with James 3.0-beta3 >> >> >> >> >> >> JAMES-1361 is non-issue. >> >> >> >> >> >> I retested and we don't need any auth to deliver to local recipient as >> >> >> expected. >> >> >> >> >> >> Eric >> >> >> >> >> >> >> >> >> On 06/01/12 18:39, Eric Charles wrote: >> >> >> > Logged on https://issues.apache.org/jira/browse/JAMES-1361 >> >> >> > Eric >> >> >> > >> >> >> > On 06/01/12 17:03, Stefano Bagnara wrote: >> >> >> >> 2012/1/6 Eric Charles<[email protected]>: >> >> >> >>> For now, smtp auth is required for local and non-local recipients >> >> >> >>> (sending >> >> >> >>> from a remote host). >> >> >> >> >> >> >> >> Then, it is a bug. Sending a mail to a local recipient must not >> >> >> >> require authorization. >> >> >> >> I'm not using James 3, so I can't confirm/deny this. >> >> >> >> >> >> >> >> Stefano >> >> >> >> >> >> >> >>> Eric >> >> >> >>> >> >> >> >>> >> >> >> >>> >> >> >> >>> On 05/01/12 19:44, Stefano Bagnara wrote: >> >> >> >>>> >> >> >> >>>> 2012/1/4 Jim Campanell<[email protected]>: >> >> >> >>>>> >> >> >> >>>>> Hi Norman, >> >> >> >>>>> >> >> >> >>>>> Thanks for responding. >> >> >> >>>>> >> >> >> >>>>> The domain is set up: >> >> >> >>>>> >> >> >> >>>>> # ./james-cli.sh -h localhost listdomains >> >> >> >>>>> workingbitssystems.com >> >> >> >>>>> >> >> >> >>>>> listdomains command executed sucessfully in 394 ms. >> >> >> >>>> >> >> >> >>>> >> >> >> >>>> What you expect is the default james behaviour, so if James is not >> >> >> >>>> working that way then maybe you hit a bug or you misconfigured >> >> >> >>>> something. >> >> >> >>>> >> >> >> >>>> You just need the default configuration and add the domain to the >> >> >> >>>> server domainlist and the user to the local users. >> >> >> >>>> >> >> >> >>>> Stefano >> >> >> >>>> >> >> >> >>>> >> >> >> >>>>> Thanks, >> >> >> >>>>> Jim >> >> >> >>>>> >> >> >> >>>>> On 01/04/2012 12:15 PM, Norman Maurer wrote: >> >> >> >>>>>> >> >> >> >>>>>> if you want to allows emails for all users of domain >> >> >> >>>>>> workingbitssystems.com you need to add it to the DomainList. >> >> >> >>>>>> This can >> >> >> >>>>>> be done via jmx. >> >> >> >>>>>> >> >> >> >>>>>> The authorizedAddresses config is only used for check who is >> >> >> >>>>>> allowed >> >> >> >>>>>> to send email to everywhere without authentication. >> >> >> >>>>>> >> >> >> >>>>>> Bye, Norman >> >> >> >>>>>> >> >> >> >>>>>> >> >> >> >>>>> >> >> >> >>>>> --------------------------------------------------------------------- >> >> >> >>>>> To unsubscribe, e-mail: [email protected] >> >> >> >>>>> For additional commands, e-mail: >> >> >> >>>>> [email protected] >> >> >> >>>>> >> >> >> >>>> >> >> >> >>>> --------------------------------------------------------------------- >> >> >> >>>> To unsubscribe, e-mail: [email protected] >> >> >> >>>> For additional commands, e-mail: [email protected] >> >> >> >>>> >> >> >> >>> >> >> >> >>> -- >> >> >> >>> eric | http://about.echarles.net | @echarles >> >> >> >>> >> >> >> >>> --------------------------------------------------------------------- >> >> >> >>> To unsubscribe, e-mail: [email protected] >> >> >> >>> For additional commands, e-mail: [email protected] >> >> >> >>> >> >> >> >> >> >> >> >> --------------------------------------------------------------------- >> >> >> >> To unsubscribe, e-mail: [email protected] >> >> >> >> For additional commands, e-mail: [email protected] >> >> >> >> >> >> >> > >> >> >> >> >> >> -- >> >> >> eric | http://about.echarles.net | @echarles >> >> >> >> >> >> --------------------------------------------------------------------- >> >> >> To unsubscribe, e-mail: [email protected] >> >> >> For additional commands, e-mail: [email protected] >> >> >> >> >> > >> >> >> >> --------------------------------------------------------------------- >> >> To unsubscribe, e-mail: [email protected] >> >> For additional commands, e-mail: [email protected] >> >> >> > >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
