Forrest W. Christian wrote:
The consumer (Dialup,DSL,Cable, Wireless broadband,etc) internet is slowly moving to this, with one minor exception:

Marc Perkel wrote:

If port 25 were blocked from consumers and they were forced to talk to servers on port 587, even without authentication, then a server could distinguish consumers from other servers. I think this kind of configuration could be used to help isolate virus infected computers from spamming and spreading.

587 should *always* be authenticated. In this way, it prevents unknown users within your address space from using your email server to spew spam. All mail that originates from a server configured in this way (25 is only for other mail servers, and cannot relay, 587 is always authenticated, and permits relaying), can then be tracked back to the original user to help eliminate spam at the source.

Most ISP's which implement the 25 block will open if the customer is running their own mail server.

We are beginning to move client's with mail servers to using our servers as smarthost, and doing it with smtpauth. We will be the only access in and out of port 25 on our networks. Only hurdle left is convincing clients to use our antivirus gateways as their only MXs.

DAve


--
Three years now I've asked Google why they don't have a
logo change for Memorial Day. Why do they choose to do logos
for other non-international holidays, but nothing for
Veterans?

Maybe they forgot who made that choice possible.

Reply via email to