From owner-freebsd-questions@FreeBSD.ORG Sun Mar 24 05:16:39 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 43E97139 for ; Sun, 24 Mar 2013 05:16:39 +0000 (UTC) (envelope-from bc979@lafn.org) Received: from zoom.lafn.org (zoom.lafn.org [108.92.93.123]) by mx1.freebsd.org (Postfix) with ESMTP id 1EE45E71 for ; Sun, 24 Mar 2013 05:16:38 +0000 (UTC) Received: from [10.0.12.8] (cpe-108-184-156-247.socal.res.rr.com [108.184.156.247]) (authenticated bits=0) by zoom.lafn.org (8.14.3/8.14.2) with ESMTP id r2O5Gcet063190 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Sat, 23 Mar 2013 22:16:38 -0700 (PDT) (envelope-from bc979@lafn.org) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.3 \(1503\)) Subject: Re: Client Authentication From: Doug Hardie In-Reply-To: Date: Sat, 23 Mar 2013 22:16:37 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <8680FAB3-4943-4F91-935B-E11511C3FD4E@lafn.org> References: To: Mehmet Erol Sanliturk X-Mailer: Apple Mail (2.1503) X-Virus-Scanned: clamav-milter 0.97 at zoom.lafn.org X-Virus-Status: Clean Cc: "freebsd-questions@freebsd.org List" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Mar 2013 05:16:39 -0000 On 23 March 2013, at 21:51, Mehmet Erol Sanliturk = wrote: >=20 > Using Static IP in the client side , and checking Static IP of the = user may be a possibility : > In that way , any message from another IP will not be accepted . >=20 > If this is possible for your systems , it may be checked for usability = . >=20 > One difficulty is that each user should obtain a Static IP and can not = connect to his/her ISP from another IP . >=20 > Good side is that nobody can connect to ISP of the user from another = IP : It supplies hardware security ( we are assuming that the user = computer is not captured ) .. That is an interesting idea, but unfortunately our users tend to travel = a lot and need to be able to access mail from anywhere. Also, static = IPs can get quite expensive from some ISPs. Our users are pretty much = on fixed incomes and any expense is a hardship for them. -- Doug