-----Original Message-----
From: Bowie Bailey
Sent: Monday, February 02, 2004 12:58 PM
[ Snip ]
BTW, if MSA is ESMTP with mandatory authentication, why is
the setting "AUTH_REQUIRED=0" in the config by default?
Doesn't that defeat the purpose?
Ah, sorry, that description was a mix of the standard and my personal
implementation. MSA under RFC2476 doesn't *have* to have authentication; in
practice, the only additional requirement of MSA over regular SMTP is that
MSA's MUST ensure that all envelope address domains are fully qualified.
So Courier basically runs bog standard ESMTP on port 587, *but* has separate
files, so you can add, say, AUTH_REQUIRED=1.
The broader import of MSA in general is that you can enforce different rules
for messages that your host originates compared to accepts from the outside.
For example, maybe you want to limit the maximum message size you can send
at a figure smaller than the one you can receive, or want to refuse messages
with too many recipients, but accept them, etc.
Malc.
19 messages in net.sourceforge.lists.courier-usersRE: [courier-users] SMTP authentication
