[67551] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: SMTP authentication for broadband providers

daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Wed Feb 11 20:48:57 2004

Date: Thu, 12 Feb 2004 07:18:18 +0530
From: Suresh Ramasubramanian <suresh@outblaze.com>
To: Will Yardley <william+nanog@hq.dreamhost.com>
Cc: nanog@merit.edu
In-Reply-To: <20040211201901.GB17951@hq.newdream.net>
Errors-To: owner-nanog-outgoing@merit.edu


Will Yardley wrote:

> My understanding is that in most cases, providers are blocking port 25
> outbound to prevent direct to MX spamming from their customers' machines

If you do that, please put in a corresponding ACL to block port 25 
inbound _and_ outbound.

Otherwise, you just might get bitten by something like spoofed source 
routing, as several providers have found out in the past.

	srs

home help back first fref pref prev next nref lref last post