OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Postfix spam control from trusted IPs in mynetworks

From: Tony Earnshaw (tonyebilly.demon.nl)
Date: Fri Jan 02 2004 - 07:28:54 CST


fre, 02.01.2004 kl. 13.05 skrev Radha V:

> Not all clients using our postfix relay servers support authenticated
> SMTP. There are a lot of clients who are using older versions of Lotus
> notes etc(which does not support authentication) from which they connect
> to our postfix relay servers to send out mails. If we put authenticated
> SMTP then we will have to force all the clients to support it which is
> not feasible in our case.
>
> Any other suggestions to correlate IP with the Domain?

Well, 2 suggestions:

1: Use SquirrelMail as web mail, since that can use smtp for mail rather
than the Sendmail ploy that Imp and similar web mail utilities use and
you can then enforce a policy such as mine (I use SquirrelMail 1.4.2 as
an alternative for just your case);
2: Use POP-before-smtp - like ISPs do - or IMAP-before-smtp. But you
can't then use Postfix for the same policy as mine. I don't think you
could stop people using other addresses/realms that way.

As to IP/domain-based permission, I don't think I've seen that suggested
on this list and I'd never use it because of the administration
overhead. Maybe someone else could help.

--Tonni

--
mail: billy - at - billy.demon.nl
http://www.billy.demon.nl