Re: [SLE] SMTP authentication



Carlos E. R. wrote:

The Saturday 2006-04-29 at 13:57 +0200, Hylton Conacher (ZR1HPC) wrote:

...

Sandy, the above paragraphs were pivotal to my understanding. Free beer/fruit
juice on the house for Sandy.


I have saved that email ;-)
I have a feeling it could be used against me :)

So eventhough my local SMTP server dials up to the internet with a certain
username and password, that same username and password would not be used as
authentication between my local SMTP server and the ISP's one, should it be
used as a relay?


No, your postfix uses the file "/etc/postfix/sasl_passwd" to decide what login/passwd to use. It contains lines like this:

mailhost.your.isp loginame:password

it means that, when talking to smtp server at "mailhost.your.isp", it must use the login/pass pair to the right. ISPs normally use the same password for everything (login, pop3, smtp, ftp...) just to save work.
So provided the sasl login/password are correct the receiving SMTP server doesn't care what the details are in the FROM header? (The reeing SMTP server would not do authentication if it is the destination SMTP server).

Notice that if we had several users with accounts at that site, we would have problems... it is a server side configuration, not a users' configuration.
I don't understand why it would be a problem. If the SMTP server os configured with a certain SASL username/password, surely it doesn't matter which user sends mail to server (A)? Server A will connect at predetermined times to send its waiting mail and each user will not be able to force A to send if it is not connected.

Hylton Carlos Sandy Patrick
| | | |
________________________________________________________
(A) OUR COMPANY SMTP SERVER
________________________________________________________
|
____________________
(B) Relay SMTP server
____________________
|
______________________________________________
(C) Destination SMTP server
______________________________________________

The easiest way to test it is to set up several mail accounts in your
mailclient and configure each account to send with the same user/pass to
your ISP mailserver.

Sorry, I didn't see that I was able to specify the name and password the new
SMTP server I had added. :()

Mozilla will ask for the login/pass with a dialog at the moment it connects and sees they are needed.
OK, that is what I thought.

I've added a new entry for smtp.gmail.com and used my gmail username to
authenticate. It didn't request a password so I assume that will come up when
I send the message.


Right.
I'm an IDIOT!! I forgot about the port number.

Thanks for the gmail settings. I will make mine so.


--
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@xxxxxxxx
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@xxxxxxxx



Relevant Pages

  • Re: uklm mod-rejected psot...
    ... in uk.net.news.config, 'Chris Croughton' wrote: ... Because I'm not running an SMTP server! ... The host MTA receives everything to all usernames at that domain, ... I then reject everything not in my list of known username parts ...
    (uk.net.news.config)
  • Re: SMTP access for an external user
    ... a shared user account. ... Not sure why you would open up your SMTP server as a potential "open relay" ... Sent via Windows Mail on Vista Ultimate connected to SBS R2 ... username and password and it worked. ...
    (microsoft.public.windows.server.sbs)
  • Re: SMTP access for an external user
    ... a shared user account. ... Not sure why you would open up your SMTP server as a potential "open relay" ... Sent via Windows Mail on Vista Ultimate connected to SBS R2 ... username and password and it worked. ...
    (microsoft.public.windows.server.sbs)
  • net switching SMTP problem
    ... I have a notebook, which I carry back and forth to the office, where it ... The one place it falls down is in switching SMTP servers. ... DynamicSMTP, which sits in Outlook accounts as the SMTP server, and then ... authenticating username and password. ...
    (microsoft.public.windowsxp.network_web)
  • Re: e-mail and ASP.NET 2.0
    ... What account do the mean? ... You need an account on the SMTP server software. ... If you want to send mail without a username & password you will need to find/install a SMTP server that allows anonymous relaying. ... I believe that most SMTP servers are set up to require username & password these days, so when you set up an account on your SMTP server (or request a mail account from a 3rd party) they will issue a username & password for you. ...
    (microsoft.public.dotnet.framework.aspnet)