On 01/20/2012 01:07 PM, Michael J. Colvin wrote:
I believe you could use SpamDyke to block your users from sending via port
25... You could block via the domain name, you could block by IP address
and rDNS, assuming your users have specific IP's (Or range of IP's) or rDNS
information... You could do all three too... Or does authentication bypass
SpamDyke? I forget.
Authenticated connections bypass all filters. Sorry. ;)
If it does, set up two servers... One for incoming mail, one for outgoing
mail. Turn port 25 off on the outbound server, forcing users to use a port
that's active, like 587. Inbound mail will come in via port 25 from outside
mail servers, use smtproutes to forward it to your "inside" mail server via
port 587, use SpamDyke to block your users' domain's in the "From" field
(Works great for stopping a lot of SPAM too!) and then remove the ability to
authenticate on 25 (No e-mail addresses on the server)... If server count
is an issue, use a VM and put both servers on one physical server...
Mike
This took me a couple reads, but you know what? I think I get it, and I
kinda like it! :)
This definitely deserves to be hashed around a bit. Having 2 separate
(QMT) hosts, one for outbound (submission) and one for inbound (smtp)
makes some sense, if for no other reason than it's simply logical.
One of QMT's weaknesses in the past has been that everything is tightly
wound and interdependent, aka "highly coupled" (as we used to say about
modules in structured programs). This is clearly a place where roles
can, and probably should be delineated. Along the same lines as MUA,
MSA, MTA, MDA. (see Nov'07 RFC5068 entitled "Best Current Practice -
Email Submission:
http://tools.ietf.org/html/rfc5068)
While I was looking for that RFC specifically, I came across this one:
http://tools.ietf.org/html/rfc6409 from Nov'11. It's not easy keeping up
with the times. :) I still need to read this one, but I'll go ahead and
post this reply for the time being.
If you have a thought or idea you'd like to share about this, please
chime in!
Thanks.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
