OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Help with relaying

Victor.Duchovnimorganstanley.com
Date: Mon Dec 01 2003 - 17:01:42 CST


On Mon, 1 Dec 2003, Rob Foehl wrote:

> This is not what relay_domains is for. To answer your question, the
> proper way to allow relaying from a certain block of space is to add it to
> $mynetworks. However, you'd be allowing a VERY large block of space that
> you do not control to relay through your smtp server, which will
> undoubtedly cause you headaches down the road. (Only a matter of time
> before someone found it and abused it.)
>

Indeed if the dialup blocks are not exclusively dedicated to the customer,
the customer should not permit relaying fro those blocks.

> It'd be wise to put this idea on hold until you've looked into various
> authentication methods; given your situation, you should look at the
> various POP-before-SMTP implementations or SASL, as both will provide
> authenticated SMTP service without the risk of running an open relay.
>

In which case authentication of one kind or another is the only solution.
See the add-ons page at www.posfix.org.

--
        Viktor.