RE: fix.your.open.relay.or.die.net

[Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>]

You really want to lock down e-mail, then get a product like Norton
Anti-Virus Corporate edition.  It comes with a SMTP server that accepts all
incoming e-mail and scans it for viruses.  It then forwards to your real
SMTP server.  No incoming mail can get to your real server thru the fire
wall.  Your real server sends mail directly to whom ever from whom ever.
Hey we send e-mail to our customers customers on behalf of our customers.
Are we spamming?  NO, we do this as a service for our customers, sending
confirmations of checks being accepted and funds being electronically
processed telling the consumer to write the check in to their check register
and void the physical check.  If we turn off relaying, we would have to add
thousands of domains to our mail server, with 20-50 changes a day.
Sometimes there are business reasons for using mail relaying.  But then,
with two SMTP servers, one can stop the public from relaying off their
server.

If I require a password on my SMTP server, how will the public get e-mail to
me?  Is the password only required for sending outbound e-mail so I can
still receive inbound e-mail?



Christopher K. Bipes      mailto:ChrisB@Cross-Check.com
Operations & Network Mgr  mailto:Chris_Bipes@Yahoo.com
CrossCheck, Inc.                  http://www.cross-check.com
6119 State Farm Drive     Phone: 707 586-0551 x 1102
Rohnert Park CA  94928    Fax: 707 586-1884

-----Original Message-----
From: Brad Jensen [mailto:brad@elstore.com]
Sent: Tuesday, November 20, 2001 9:49 PM
To: midrange-l@midrange.com
Subject: Re: fix.your.open.relay.or.die.net
Then POP3 doesn't require a paswword for logon, it's outside the
RFC?

The RFC should require a password for SMTP.

I do suggest that IP filtering be done for SMTP with the SMTP
server, not in the firewall.

If your SMTP server supports it.