Hi

06 Feb 2001, [EMAIL PROTECTED] (howard schwartz) wrote:

 >> and that authentication in SMTP is only necesarry if you don't use
 >> your ISPs SMTP server. (otherwise the IP should be checked)

 hs> Wrong Wrong Wrong!
it should not be wrong ... if it still does not apply to your ISP, than you
have a strange ISP ...

under normal circumstances, it's enough to check wether your IP is in your
ISPs IP-range ...
(only method to fool this method, would be IP spoofing, which is not very
easy ;)

 hs> I (that is my mail client) still must send a totally separate
 hs> authentication sequence, as part of my SMTP dialogue with my ISPs
 hs> server, each time I want to send mail to a user that is not a customer
 hs> of my ISP.
bad ... and should not be

 hs> It lets anybody and everybody talk to the server, regardless of
 hs> what ISP or software they use to do it.
but it is not necessary if you are IN your ISPs IP range.

And the any software is not correct ... many (most) programs until today
are not able to authenticate ...

if you use SMTP from another ISP, than authentication is a good thing ...
but not necessary if you use the ISP's SMTP, where you dialed in.

 hs> The bad part is another protocol extension that is only supported
 hs> by the newer, bloat-ier, MS like, mail clients. The good part, is
 hs> I can be on vacation, and access my ISPs mail client, using my
 hs> local friend's AOL account,  and still send out mail, at no phone
 hs> cost to me.
yes ...

I agree ... but this doesn't change the fact, that Auth is not required
when in 'local mode'.

This is how most ISPs do it.
no auth required if you are local.
And auth if you use another ISP.

this is getting OT ... answers please in private mail

 hs> As lo

CU, Ricsi

-- 
|~)o _ _o  Richard Menedetter <[EMAIL PROTECTED]> {ICQ: 7659421} (PGP)
|~\|(__\|  -=> Emotion vs logic? Emotion always wins <=-

Reply via email to