thx for your answer. but that means, that some usernames/passwords will be transfered unencrypted when using SMTP-AUTH (without TLS and if the client is using PLAIN login mode). is this right? is there any other possibility to prevent this?
Sure. Don't use SMTP-AUTH. Just restrict access by IP range.
Regards,
Bill Shupp
