[Mimedefang] OS wars... [was Viruses: Bounce or Discard?]

[Ben Kamen]

I'm already using TLS and SASL/AUTH.

:)

It's fabulous!



John Rowan Littell wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> 
> Lo, Kevin A. McGrail and the coffee pot sang in unison:
> 
> 
>>Add the following to your sendmail.mc assuming you have some sort of
>>anti-relay features:
>>
>>DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
>>DAEMON_OPTIONS(`Port=2025, Name=MTA')dnl
>>
> 
> Better yet, use port 587 -- the generally recognized submission port
> - -- and protect it with the requirements that you must authenticate
> before submitting anything and (preferably) you must use TLS.  You can
> get away with running an extremely tight ship on an alternate port
> like 587, because you're not expecting random MTAs to contact you and
> attempt to deliver mail there, you're only expecting registered users
> to do so.