3 messages in net.sourceforge.lists.courier-usersRe: [courier-users] ESMTP-SSL: Securi...
FromSent OnAttachments
Belmin FernandezJun 25, 2005 8:22 pm 
Sam VarshavchikJun 25, 2005 8:45 pm 
Gordon MessmerJun 25, 2005 9:00 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [courier-users] ESMTP-SSL: Security related questions..Actions...
From:Sam Varshavchik (mrs@courier-mta.com)
Date:Jun 25, 2005 8:45:44 pm
List:net.sourceforge.lists.courier-users

Belmin Fernandez writes:

Hi my main question is:

1) I'm running ESMTPD-SSL and I want to know do I have to run ESMTPD also for other servers to drop local mail? And if I do, how do I

If you use a mail clients that connects to port 25 on localhost in order to send mail, then that's what you have to do.

2) How do I make ESMTPD-SSL to force AUTH login (using password) from what I read in the FAQ, by default it seems it uses the From address and just makes sure that the user exists? I want it to make the user

No. If authentication is enabled and used, a valid userid and password must be supplied in order to gain relaying privileges.

AUTH login and check PAM for the password (like it does for IMAP and POP). If I set AUTH_REQUIRED=1 in ESMTPD-SSL it just gives me an error saying:

courieresmtpd: error,relay=::ffff:192.168.3.100,msg="535 Authentication required.",cmd: MAIL FROM:<adm@belminfernandez.com> SIZE=390

but yet it didn't ask me to login (using Thunderbird to test it out).

The mail server has no ability to hack into whatever E-mail client is connecting to it, and reprogram the E-mail client to prompt for a password.

It is entirely up to the mail client to decide whether to open some dialog, or not.