Sahil Tandon wrote:
You must setup SASL and only let authenticated users relay through this
new server. Forget about contacting the other mail servers to verify
that the sender email exists; that is in no way a form of
authentication.
http://www.postfix.org/SASL_README.html
You are probably right - the company just don't have a centralized
authentication mechanism, so SASL would be a huge project to implement.
Unless of course somebody knows of a way to make SASL connect to their
incoming mailserver with the credentials the user provided, and
authorize the user from that?
Anyway thank you for the link, and your opinion.
--
Martin
__________ Information from ESET NOD32 Antivirus, version of virus signature
database 4440 (20090919) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
