OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Authenticating content filter (was: Content filter wants to know sender's IP)
From: Wietse Venema (wietseporcupine.org)
Date: Mon Jun 05 2000 - 07:27:32 CDT


Liviu Daia:
> you might run into loops. The natural approach here would be to use
> some sort of cryptographic challenge between port 10025 and port 10026,
> but making Postfix keep track of challenges and answers would be a huge

If the content filter speaks SMTP on both interfaces to Postfix,
then it can just pass through any authentication handshake
transparently. The filter doesn't even have to know SASL.

        Wietse