[2044] in Moira
Re: access service for outgoing mailers
daemon@ATHENA.MIT.EDU (Mark Silis)
Mon Oct 20 22:24:50 2003
Date: Mon, 20 Oct 2003 22:24:44 -0400
Content-Type: text/plain; charset=US-ASCII; format=flowed
Mime-Version: 1.0 (Apple Message framework v552)
Cc: Mark Silis <mark@mit.edu>, moiradev@mit.edu, ghudson@mit.edu
To: Jonathon Weiss <jweiss@mit.edu>
From: Mark Silis <mark@MIT.EDU>
In-Reply-To: <200310202256.h9KMutPl022245@the-other-woman.mit.edu>
Message-Id: <BC0B4608-036D-11D8-931A-000A959D0696@mit.edu>
Content-Transfer-Encoding: 7bit
Hi Jonathon,
actually it will still require a valid sender regardless of the
authentication. SMTP authentication is not a complete solution to the
relaying problem, and will not totally solve it. The extra requirement
of a valid MIT.EDU sender combined with SMTP authentication is a
stronger solution than either alone. As another large mail system
provider told Jeff this afternoon, don't be fooled spammers will simply
find ways to use the configured e-mail client's authentication settings
to bypass your anti-relaying measures.
-- Mark
On Monday, October 20, 2003, at 06:56 PM, Jonathon Weiss wrote:
>
> While discussing this with Greg, and interesting question came up.
> I've been assuming that if I use proper SMTP authentication to
> outgoing, then I bypass all of the envelope from checks and I can use
> anything I want (even things that haven't worked through outgoing in
> years, like foo@vanity-domain.org). Is my assumption correct?
>
> Jonathon
