Qmail
[Top] [All Lists]

Re: rblsmtpd with relay-ctrl

To: Qmail mailing list <qmail@list.cr.yp.to>
Subject: Re: rblsmtpd with relay-ctrl
From: Matt Simpson <net-qmlist@jmatt.net>
Date: Fri, 2 Mar 2007 13:14:38 -0500
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
Delivered-to: sp-com-lists@consult.net
Delivered-to: gmail-qmail@securepoint.com
Delivered-to: sp.com.list@gmail.com
Delivered-to: mailing list qmail@list.cr.yp.to
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=jmatt.net; b=oVuqD8eThqIkl1iwuZZaJ1oNXpxuKMKF7tMZBJVWV7cGnGhgCYRzcXlETkIPTNPY4SuaMPkzmBcLCwMYPC1mfT6BpkpHXnJrPXGgoSG5hMlEpPXMrS7DNfpwmuA9RSz6//OW8pWnn3PJ8Z8wKnLTkEzebRDFlv0Gff8aXYB2ntM=; h=Received:Mime-Version:Message-Id:In-Reply-To:References:Date:From:Subject:Mime-Version:Content-Type;
Domainkey-status: bad
In-reply-to: <20070302180030.GA25184@nachos.phaseit.com>
Mailing-list: contact qmail-help@list.cr.yp.to; run by ezmlm
References: <45E84863.7000707@sysec.com.mx> <20070302180030.GA25184@nachos.phaseit.com>
At 7:00 PM 3/2/07, Fabio Busatto wrote:
if you're using SMTP-AUTH (the right
way to do smtp authentication in my opinion) you can patch your qmail with
the qmail-dnsbl (http://qmail-dnsbl.sourceforge.net/), that performs dnsbl
checks only if the user was not successfully authenticated.

Or you can run another qmail-smtpd for authenticated users only, on another port (preferably 587, since that's the standard), and not use RBL on that port. In my opinion, that's the right way to do smtp authentication. In today's world, it's becoming more likely that your clients will be trying to connect through some ISP that is blocking outbound port 25 to anything except their own servers. Whether that's good or bad is still widely debated, but the reality is that it happens. Port 587 is your friend.

<Prev in Thread] Current Thread [Next in Thread>