Yes, we're already there.  What he's saying is this method is insecure, and there is 
an alternative that works with cf and straight smtp auth (i.e. 'no relay' in imail).

-------------------------------------------
 Matt Robertson,     [EMAIL PROTECTED]
 MSB Designs, Inc. http://mysecretbase.com
-------------------------------------------


---------- Original Message ----------------------------------
From: "Lee Fuller" <[EMAIL PROTECTED]>
Reply-To: <[EMAIL PROTECTED]>
date: Mon, 27 Jan 2003 11:03:20 -0800

>Simply include our local servers in your "Relay for Addresses" list.  And it
>will stop checking those server IPs.
>
>Have done it many times...
>
>
>
>| -----Original Message-----
>| From: Matt Robertson [mailto:[EMAIL PROTECTED]] 
>| Sent: Monday, January 27, 2003 10:56 AM
>| To: CF-Talk
>| Subject: Re: CFMail Not Local Host - Not a Gateway
>| 
>| 
>| The last time this came up, as I recall, you brought this up 
>| and it caused a slew of naysaying.  I don't think we ever got 
>| hold of a working code example and - I believe it was Jochem 
>| who brought them up - a slew of problems apparently exist 
>| with using this technique.
>| 
>| Relay for addresses is the standard recommendation we all 
>| hear for doing this with CF, both here and on the IMail list. 
>|  I'd really appreciate a cfmail snippet that handles this as 
>| described so I can test/evaluate it.
>| 
>| -------------------------------------------
>|  Matt Robertson,     [EMAIL PROTECTED]
>|  MSB Designs, Inc. http://mysecretbase.com
>| -------------------------------------------
>| 
>| 
>| ---------- Original Message ----------------------------------
>| From: "samcfug" <[EMAIL PROTECTED]>
>| Reply-To: <[EMAIL PROTECTED]>
>| date: Mon, 27 Jan 2003 10:26:31 -0600
>| 
>| >This has been discussed many times before - Look to CFPARAMS 
>| in order 
>| >to pass the username and password with your CFMAIL 
>| operation.  Allowing 
>| >relaying by IP number is a very insecure way to handle this 
>| as it will 
>| >open the door to spamming by spoofing the IP. SMTP AUTH is a good 
>| >barrier to unauthorized use of the mail server.
>| >
>| >=====================================
>| >Douglas White
>| >group Manager
>| >mailto:[EMAIL PROTECTED]
>| >http://www.samcfug.org
>| >=====================================
>| >----- Original Message -----
>| >From: "Bryan F. Hogan" <[EMAIL PROTECTED]>
>| >To: "CF-Talk" <[EMAIL PROTECTED]>
>| >Sent: Monday, January 27, 2003 9:54 AM
>| >Subject: RE: CFMail Not Local Host - Not a Gateway
>| >
>| >
>| >| I just tried this, I set all of the allowed IP addresses to my CF 
>| >| boxes and tried to send some mail, got the same error.
>| >|
>| >| ============================================
>| >| Bryan F. Hogan
>| >| Director of Internet Development
>| >| Macromedia Certified ColdFusion MX Developer
>| >| Digital Bay Media, Inc.
>| >| 1-877-72DIGITAL
>| >| ============================================
>| >|
>| >| -----Original Message-----
>| >| From: Matt Robertson [mailto:[EMAIL PROTECTED]]
>| >| Sent: Monday, January 27, 2003 10:35 AM
>| >| To: CF-Talk
>| >| Subject: Re: CFMail Not Local Host - Not a Gateway
>| >|
>| >|
>| >| No, just set the ip of the cf server.  If your sites are all on 
>| >| individual dedicated boxes, then *thats* a problem.
>| >|
>| >| --Matt Robertson--
>| >| MSB Designs, Inc.
>| >| http://mysecretbase.com
>| >|
>| >| ----- Original Message -----
>| >| From: "Bryan F. Hogan" <[EMAIL PROTECTED]>
>| >| To: "CF-Talk" <[EMAIL PROTECTED]>
>| >| Sent: Monday, January 27, 2003 7:22 AM
>| >| Subject: RE: CFMail Not Local Host - Not a Gateway
>| >|
>| >|
>| >| > Thanks for the reply, this is not an option. This would 
>| require me 
>| >| > to set the ip address of each and every site that I have, that 
>| >| > would not be very cool. I know ActivMail has a username, pass 
>| >| > option but to much $$$.
>| >| >
>| >| > ============================================
>| >| > Bryan F. Hogan
>| >| > Director of Internet Development
>| >| > Macromedia Certified ColdFusion MX Developer
>| >| > Digital Bay Media, Inc.
>| >| > 1-877-72DIGITAL ============================================
>| >| >
>| >| > -----Original Message-----
>| >| > From: Robert Everland [mailto:[EMAIL PROTECTED]]
>| >| > Sent: Monday, January 27, 2003 10:04 AM
>| >| > To: CF-Talk
>| >| > Subject: RE: CFMail Not Local Host - Not a Gateway
>| >| >
>| >| >
>| >| > You have to also allow a set number of ips through. That 
>| fixed it 
>| >| > for me.
>| >| >
>| >| > Robert Everland III
>| >| > Web Developer Extraordinaire
>| >| > Dixon Ticonderoga Company
>| >| > http://www.dixonusa.com
>| >| >
>| >| > -----Original Message-----
>| >| > From: Bryan F. Hogan [mailto:[EMAIL PROTECTED]]
>| >| > Sent: Monday, January 27, 2003 10:09 AM
>| >| > To: CF-Talk
>| >| > Subject: CFMail Not Local Host - Not a Gateway
>| >| >
>| >| >
>| >| > We recently changed our imail server settings to not allow 
>| >| > relaying. In doing so we had to upagrade our Persits.Mailsender 
>| >| > which allows the
>| >| username
>| >| > and password attributes, which solves the problem with 
>| Not a Local 
>| >| > Host - Not a Gateway.
>| >| >
>| >| > In CFMail there is no such attribute. Has anyone ever had this 
>| >| > problem and if so how do you fix it?
>| >| >
>| >| > ============================================
>| >| > Bryan F. Hogan
>| >| > Director of Internet Development
>| >| > Macromedia Certified ColdFusion MX Developer
>| >| > Digital Bay Media, Inc.
>| >| > 1-877-72DIGITAL ============================================
>| >| >
>| >| >
>| >| >
>| >| >
>| >|
>| >| 
>| >
>| 
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.

                                Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
                                

Reply via email to