> Consider that some servers relay though James from an > internal trusted network, they do not need to issue STARTTLS, > others however are relaying through a public network an are > thus required to issue STARTTLS (perhaps even with > client-certificate authentication). > So we do not disable STARTTLS for the internal servers, but > on the other hand do not require it either.
Sure, but this seems the normal standard behaviour. We only need a configuration for StartTLSSupport = disabled | enabled | required Isn't this enough to support the STARTTLS reply? The check to see wether the relay is supported or not because of AUTH or STARTTLS will be done after the first RCPT so the "extension point" is the RCPT and not the STARTTLS. Stefano --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]