[Mimedefang] Integrating SPF...

[Mark]

> -----Original Message-----
> From: mimedefang-bounces at lists.roaringpenguin.com 
> [mailto:mimedefang-bounces at lists.roaringpenguin.com] On 
> Behalf Of John Von Essen
> Sent: donderdag 31 maart 2005 20:19
> To: mimedefang at lists.roaringpenguin.com
> Subject: RE: [Mimedefang] Integrating SPF...
> 
> 
> 
> On Thu, 31 Mar 2005, Mark wrote:
> 
> > Indeed. Likewise, there are still mail servers out there who do
> > do enforce an AUTH mechanism on port 587.
> >
> > - Mark
> 
> Yeah, like me!

And, according to RFC 2476 (6.2. Require Authentication), you are within
your right.

But, in section 9 (Security Considerations), it also says:

   If a site fails to require any form of authorization for message
   submissions (see section 3.3 for discussion), it is allowing open use
   of its resources and name; unsolicited bulk email can be injected
   using its facilities.

Reading back, I see you actually misquoted me; I said:

> Indeed. Likewise, there are still mail servers out there who do NOT
> enforce an AUTH mechanism on port 587.

(capitalization added). So, I take it you mean to say you enforce
AUTH, too? :)

- Mark 
 
        System Administrator Asarian-host.org
 
---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx