On the test install I have set up of 2.0, I can't seem to figure out how to configure it the way I have it set up for 1.x.
Basically, it should be: local address -> any address - requires AUTH remote address -> local address - does not require AUTH local address -> local address - requires AUTH remote address - > remote address - requires AUTH However, how I have got it operating is: local address -> any address - requires AUTH remote address -> local address - does not require AUTH local address -> local address - does not require AUTH remote address - > remote address - requires AUTH I can't seem to figure out the configuration to make it require AUTH of the sender is a local address. Essentially, if I were to deploy it like this, anyone could spam every user on the server simply by claiming to be a user on the server. I've got DoNoSpoofing set to block, EnforceAuth is checked. It seems to be ignoring EnforceAuth, and allowing clients connecting to EITHER primary or secondary listen port to send mail to and from local users without SMTP AUTH. Is this a bug or a feature? ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
