Sam Varshavchik wrote:
Nothing. Authenticated SMTP is enabled in the default configuration.
That ain't completely right. Some distributors seem to change the default configuration a bit.
At least in Debian woody (courier 0.37.3) and in the current backports for woody from backports.org (courier 0.42.2) ESMTP authentication is disabled by default.
See courier/module.esmtp/esmtpd.dist.in. AUTH seems to be off by default, period.
Pretty simple to turn it back on by default. If I read things right, courier detects at startup whether AUTH support is available, and won't advertise it if not, so it should be safe as well.
--- courier/module.esmtp/esmtpd.dist.in.orig Sun Dec 21 12:32:40 2003 +++ courier/module.esmtp/esmtpd.dist.in Sun Dec 21 12:33:33 2003 @@ -271,11 +271,11 @@ # # AUTHMODULES_WEBADMIN and ESMTPAUTH_WEBADMIN is used by the webadmin module -AUTHMODULES="" +AUTHMODULES="@AUTHMODULELIST@" ##NAME: ESMTPAUTH:4 -ESMTPAUTH="" +ESMTPAUTH="LOGIN CRAM-MD5" ##NAME: AUTHMODULESWEBADMIN: 4
