> --As off Tuesday, December 30, 2003 12:33 PM -0600, Dan Muey is > alleged to have said: > > >> They are doing the Right Thing and not being an open > relay. Basically > >> the server says *one* of the persons involved has to be > > > > In both cases one is always a local user. But only in one case is > > authentication required. > > Without authentication, if you are sending, the mail server can't > tell a local from a remote user. (It can always tell for receiving: > it just checks its own delivery tables.) > > (There are ways around this. But they are fairly easy to spoof if > the mail server is accessible from the internet, and do not work for > roaming 'local' users or static IP addresses (well, static IPs could > be used, with a lot of extra work). Authenication is easier to set > up and harder to spoof.) > > > I could spam all the local users as [EMAIL PROTECTED] all > > day long without any knowledge of there settings. So I > guess, why not > > authenticate both ways? Just a pondering, no big deal since they'd > > have to get a scirpt on the server and that'd make them trackable > > pretty quick. > > For remote to local: authenticate how? You don't want to block mail > coming in from random domains (since you don't know which are spam > domains and which aren't), so you have to let random people send you > email. Otherwise the only email you can handle is local to local, > and that just isn't very useful. (Note: joemama is probably a > registered, legit, and paid-in-full user of remotespamville.com , so > you can't say people who aren't from that domain. He *is* from that > domain.) > > And now we are well into anti-spam theology. (There have been > several complete systems proposed to handle the 'authenticated guest' > problem here, none currently is in use.) And out of Perl. ;-) >
Cool, good info. I was looking at it wrong, after all the subjkect is "My Stupidity!" :) > Daniel T. Staal > > --------------------------------------------------------------- > This email copyright the author. Unless otherwise noted, you > are expressly allowed to retransmit, quote, or otherwise use > the contents for non-commercial purposes. This copyright > will expire 5 years after the author's death, or in 30 years, > whichever is longer, unless such a period is in excess of > local copyright law. > --------------------------------------------------------------- > -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] <http://learn.perl.org/> <http://learn.perl.org/first-response>