On 4 May 2008 at 13:00, Hal Dell wrote:

......

> 
> It is my understanding that "Mail-Auth" was designed be to implement a
> submission port as defined by RFC 4409?
> 
> In fact, RFC 4409 states:  "3.2.  Message Rejection and Bouncing.
> 
> MTAs and MSAs MAY implement message rejection rules that rely in part on
> whether the message is a submission or a relay.
> 
> For example, some sites might configure their MTAs to reject all RCPT
> commands for messages that do not reference local users, and configure their
> MSA to reject all message submissions that do not come from authorized
> users, with authorization based either on authenticated identity or the
> submitting endpoint being within a protected IP environment."
> 
> Beyond Mr. Francis prior insights, I'm interested to here additional
> comments about how to xMail should respond to Relay'd eMail when using
> "Mail-Auth".

I only have four non local users that are allowed to relay. These
just have entries in smtpauth.tab. They have their mta connect via 
port 465 rather than port 25 as at least one has their ISP block 
port 25. I can't remember any other requirement (other than setting 
up SSL) and it's worked ok.

I've still not worked out if you want mail coming in via postini to 
be allowed to be relayed or if postini is just an external filter 
for scanning some of your incoming mail. If the latter, I can't
see why it should need to be treated different to any other incoming 
email. However you've mentioned putting an entry for postini in
smtprelay.tab which would indicate that you intend it is
allowed to be relayed. I can't see how that can be done
securely though without authentication.

David

> 
> Finally, in the document we should clarify how something like "96.227.65.4"
> is interpreted when use in conjunction with slash notation? Is this equal
> really to "96.227.65.4/32"? I think the docs should be updated to say one
> way or the other. I hope you can see how one my interpret the documentation.
> Davide can you please tells how this works exactly?
> 

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to