From: Stefan Förster (citeincertum.net)
Date: Tue May 13 2008 - 03:46:27 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

* Lee Quince <Lee.Quinceiqunity.com> wrote:
> Stefan Förster wrote:
> >Your firewall can intercept encrypted traffic and reroute it? I don't
> >understand what you are trying to accomplish.
> >
> Ok say your ISP is force9.net, your staying in a hotel and you want to
> send email without changing your SMTP setting's. force9 servers will
> only allow a relay for there connected network. Hence while you are in
> the hotel and using our network relay is denied. To get around this we
> basically redirect port 25 TCP using NAT to our postfix server's, (we do
> some grey listing and max messages, per min, ClamAV etc to protect
> ourselves.)
>
> The problem we have is if the client's ISP normally allows there
> customer to send via there SMTP server on port 25 TCP (the one located
> at the ISP) using SMTP with AUTH, this could be plain, cleartext or
> TLS.. We are redirecting the traffic already to ourselves.. So I need to
> if possible ignore the AUTH from the client on our network and allow relay.

Can you redirect to a dedicated server which doesn't offer AUTH? I'm
not sure if this is a good thing to do - if anyone manages to break
into that hotels (W)LAN he or she might easily turn your server into a
spam source.

Cheers
Stefan

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]