Date: Sun, 24 Mar 2013 18:04:43 +0100 From: =?ISO-8859-1?Q?Erik_N=F8rgaard?= <norgaard@locolomo.org> To: freebsd-questions@freebsd.org Subject: Re: Client Authentication Message-ID: <514F322B.2010106@locolomo.org> In-Reply-To: <CAFuo_fxOT4BkXFF_6M0xPQVm1aM%2BRvhPeMNyBeY2xER%2B8gUnRw@mail.gmail.com> References: <B2DC7342-9F1A-489A-94F0-49802B1E5DF6@lafn.org> <CAFuo_fyNVfNvC9mcP5zY9c3zZMVuV9TNCHgS5EBbXey7GyxYRg@mail.gmail.com> <21ECABE0-0946-469F-8A6C-08194571A8D9@lafn.org> <CAFuo_fxOT4BkXFF_6M0xPQVm1aM%2BRvhPeMNyBeY2xER%2B8gUnRw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 24/03/2013 17:50, Waitman Gobble wrote: > On Sun, Mar 24, 2013 at 1:25 AM, Doug Hardie <bc979@lafn.org> wrote: > > One idea is to run a different server process on 25 which does not do SMTP > AUTH,, then run SMTP AUTH on 465 or 587. I don't really see a reason to > advertise SMTP AUTH on 25, for some reason all mail servers seem to do AUTH > on all ports or none. Maybe there is a way to configure SMTP AUTH only on > certain ports, one way I can think of is to run two processes with two > configs. Port 25 should be open for external connections and allow only local delivery. 465 is STMPS and should be configured as 25 but with SSL, this is really only useful if you have a certificate issued by a trusted CA as other servers will otherwise reject your certificate as untrusted. Port 587 is for message submission, see RFC 2476, you can configure it with TLS (serverside) and it should only advertise STARTTLS. Here you can create your own CA as you control all clients who are authorized to connect and can install the CA certificate. A simpler setup though is to have yor MTA listen on both port 25 and 587 and announce all services required for local delivery plus STARTTLS. Then require TLS for authentication. I understood you use dovecut as MDA? which is your MTA? With postfix the above is pretty simple to set up. BR, Erik -- M: +34 666 334 818 T: +34 915 211 157
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?514F322B.2010106>