Re: [cobalt-users] HELP NEEDED WILL PAY: is this a relaying denied issue???

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Thank you Dan...

Read on...

Dan wrote:

> > What does my customer have to do?  Is he required to implement POP
> > before SMTP, as I think, or is there something else at fault here;
> > shouldn't he be able to set up the system to relay for anyone with a
> > from address from his domain?
> If I understand what you're asking:
> Nope. Otherwise spammers would just set their reply address to hisdomain.com
> and relay to anyone via his server.

That's what I thought.

However, my dialup customers don't reverse DNS to my domain, yet they
CAN send mail through my RaQ.

> On the RAQ2, I think it's the same on the 3, if you put whatever.com in the
> "Relay email from these hosts/domains" then it will allow mail that a
> reverse lookup shows as actually coming from that domain to relay. It
> doesn't look at the "From" it looks at the
> "> HELO hotmail.com

(and why do you masquerade as "hotmail.com" <smile>?

> 250 car01.nobaloney.net Hello cc507242-a.srst1.fl.home.com [24.6.193.85],
> pleased to meet you"
> 
> So if you had home.com in the "Relay email from ..." field, it would allow
> me to use your SMTP.

I just carefully checked the "Relay email from" list, and yes, it does
include the reverse DNS for their dialup banks.  Even though they told
me they had made no changes.

They lied <smile>.

Thanks for pointing out where I should concentrate on looking.  I was
messing with .m4, with .cf, with the sendmail book, with generic FAQs
from sendmail.org, etc., etc., etc.  I should have been looking closer
to home <wry grin>.

> The POP before SMTP does what you're looking for, to a certain extent. The
> sender must "POP" the server on a valid user name/password and then for 15
> minutes their IP would be allowed to relay.

I just asked the client a few minutes ago why he didn't just use his
ISPs mailserver for outoging email; he said it was because he wanted to
use his "me@xxxxxxxxxxxx" return address.  He didn't even realize most
ISPs will allow him to do this.  So he's got no problem closing down his
smtp server to the world, now that he understands.  If it turns out his
ISP doesn't allow mail coming from "me@xxxxxxxxxxxx", I can always sell
him an account from my ISP business <smile>.  Or implement POP before
SMTP.

Thanks again!

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205