nanog mailing list archives
Re: ingress SMTP
From: "Robert E. Seastrom" <rs () seastrom com>
Date: Thu, 11 Sep 2008 08:02:32 -0400
Joel Jaeggli <joelja () bogus com> writes:
Does anyone bother to run an MSA on 587 and *not* require authentication?All my normal relay or lack thereof and delivery rules are in place on my 587 port. Of course muas's and mtas will also do tls as well as authentication over port 25 where available. I don't sea any reason to preclude a host that would be allowed to relay via 25 to do so via 587... Congruent policy makes administration simpler.
Counterpoint here: I do not allow relaying (only local delivery and maybe MX but I think I'm not doing secondary MX for anyone anymore) over port 25 and I do not allow authentication over port 25 either. Likewise, I do not allow unauthenticated local delivery on port 587, demand STARTTLS on port 587, and generally you have to auth to do anything. The extra effort required to set this up (exim recipes available) pays dividends by ensuring that people have their MUAs configured properly at home - otherwise they won't work at all - and helps avoid whiney long distance phone calls asking for help from some user who's off in Bonaire or something. -r
Current thread:
- Re: ingress SMTP, (continued)
- Re: ingress SMTP Alan Hodgson (Sep 03)
- Re: ingress SMTP Jay R. Ashworth (Sep 03)
- Re: ingress SMTP Michael Thomas (Sep 03)
- Re: ingress SMTP Jay R. Ashworth (Sep 03)
- Re: ingress SMTP Nicholas Suan (Sep 03)
- Re: ingress SMTP Jay R. Ashworth (Sep 03)
- Re: ingress SMTP Valdis . Kletnieks (Sep 03)
- Re: ingress SMTP Tony Finch (Sep 04)
- Re: ingress SMTP David Champion (Sep 04)
- Re: ingress SMTP Joel Jaeggli (Sep 10)
- Re: ingress SMTP Robert E. Seastrom (Sep 11)
- Re: ingress SMTP Bill Stewart (Sep 12)
- Re: ingress SMTP Mark Foster (Sep 12)
- Re: ingress SMTP Matthew Moyle-Croft (Sep 12)
- RE: ingress SMTP Frank Bulk (Sep 13)
- Re: ingress SMTP Matthew Moyle-Croft (Sep 13)
- Re: ingress SMTP Suresh Ramasubramanian (Sep 13)
- RE: ingress SMTP Frank Bulk (Sep 13)
- Re: ingress SMTP Alec Berry (Sep 03)
- Re: ingress SMTP Stephen Sprunk (Sep 03)
- Re: ingress SMTP Simon Waters (Sep 03)