Re: fix.your.open.relay.or.die.net

["Brad Jensen" <brad@xxxxxxxxxxx>]

> Let's consider a sample scenario:  An ISP has chosen to use an
AS/400 to
> provide email services for their clients.  The clients access
the ISP
> via straight Internet connections, as the ISP does not provide
an 800
> number for dial in purposes (those darn Road Warriors).
>
> If usrID/Password security is not to be used, what is done to
prevent
> spamming while allowing users to send (via SMTP) their email?

If you mean they are coming to the SMTP server from various ip
addresses on the net, that's the definition of open relay. You
can't do that. You want to get your email over the internet? You
have to dial in directly, or work from a fixed IP that is accepted
by your firewall (or the SMTP server can accept/block ip addresses
and ranges.)

I can get my email at home because my cable modem has a fixed ip
that we have set as acceptable tot he SMTP server. If I came in
over the internet from a different IP, I couldn't get it.

Yup, that sucks.

Some newer SMTP releases can do a password verification, which
would end the need for IP filtering.