> --As off Tuesday, December 30, 2003 12:33 PM -0600, Dan Muey is 
> alleged to have said:
> 
> >> They are doing the Right Thing and not being an open 
> relay. Basically 
> >> the server says *one* of the persons involved has to be
> >
> > In both cases one is always a local user. But only in one case is 
> > authentication required.
> 
> Without authentication, if you are sending, the mail server can't 
> tell a local from a remote user.  (It can always tell for receiving: 
> it just checks its own delivery tables.)
> 
> (There are ways around this.  But they are fairly easy to spoof if 
> the mail server is accessible from the internet, and do not work for 
> roaming 'local' users or static IP addresses (well, static IPs could 
> be used, with a lot of extra work).  Authenication is easier to set 
> up and harder to spoof.)
> 
> > I could spam all the local users as [EMAIL PROTECTED] all 
> > day long without any knowledge of there settings. So I 
> guess, why not 
> > authenticate both ways? Just a pondering, no big  deal since they'd 
> > have to get a scirpt on the server and that'd  make them trackable 
> > pretty quick.
> 
> For remote to local: authenticate how?  You don't want to block mail 
> coming in from random domains (since you don't know which are spam 
> domains and which aren't), so you have to let random people send you 
> email.  Otherwise the only email you can handle is local to local, 
> and that just isn't very useful.  (Note: joemama is probably a 
> registered, legit, and paid-in-full user of remotespamville.com , so 
> you can't say people who aren't from that domain.  He *is* from that 
> domain.)
> 
> And now we are well into anti-spam theology.  (There have been 
> several complete systems proposed to handle the 'authenticated guest' 
> problem here, none currently is in use.)  And out of Perl. ;-)
> 

Cool, good info. 
I was looking at it wrong, after all the subjkect is "My Stupidity!" :)

> Daniel T. Staal
> 
> ---------------------------------------------------------------
> This email copyright the author.  Unless otherwise noted, you 
> are expressly allowed to retransmit, quote, or otherwise use 
> the contents for non-commercial purposes.  This copyright 
> will expire 5 years after the author's death, or in 30 years, 
> whichever is longer, unless such a period is in excess of 
> local copyright law.
> ---------------------------------------------------------------
> 

--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
<http://learn.perl.org/> <http://learn.perl.org/first-response>


Reply via email to