Qmail
[Top] [All Lists]

Re: SMTP_AUTH + RBLs

To: "qmail list" <qmail@list.cr.yp.to>
Subject: Re: SMTP_AUTH + RBLs
From: Matt Simpson <net-qmlist@jmatt.net>
Date: Fri, 9 Mar 2007 14:34:31 -0500
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
Delivered-to: sp-com-lists@consult.net
Delivered-to: gmail-qmail@securepoint.com
Delivered-to: sp.com.list@gmail.com
Delivered-to: mailing list qmail@list.cr.yp.to
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=jmatt.net; b=LNYSK/gCC/B+h94gprPz47YhRutWObS78bbFoP/Pk2SDDW4PG+EoxvD3QmLXVhyOPbYJdNpkT04oQLUGB1x/msflzY+TEGGGi73uJYFHUQZrAEvIuPwdSAaF189dL0w5w2KAuW/RaNiLGvP/CjYA/XIfJp3qOY1IIHbXDnNGiuY=; h=Received:Mime-Version:Message-Id:In-Reply-To:References:Date:From:Subject:Mime-Version:Content-Type;
Domainkey-status: bad
In-reply-to: <1f4ef0970703090910s6e36cae7j51f63a938ea98ff5@mail.gmail.com>
Mailing-list: contact qmail-help@list.cr.yp.to; run by ezmlm
References: <1f4ef0970703090910s6e36cae7j51f63a938ea98ff5@mail.gmail.com>
At 11:10 AM 3/9/07, Steve Brown wrote:
All this is well and good, but my question is, shouldn't the user be
allowed to relay based on the fact that he has an authenticated SMTP
session?

He should, if he had an authenticated SMTP session.  But he doesn't.

RBL checking is done BEFORE he connects to qmail-smtpd. If he's blacklisted, he gets dropped BEFORE he qmail-smtpd gets a chance to ask for his userid/password, and the authentication is never done. He has no authenticated session.

Another good case for a separate relay server on port 587, which only accepts mail from authenticated users, and has no RBL blocking in front of it.


<Prev in Thread] Current Thread [Next in Thread>