[cobalt-users] pop before relay problems

["Benjamin Charles Tehan" <sysadmin@xxxxxxxxxxxx>]

I have a big problem

On a RaQ2 and RaQ3 I have installed pop before relay, but it relay's before
it pops.

This means any user can send through my servers, using another users account
without a password.

Id like to underline that... but this is text so I'll just mention it again
"Without a password"

I have POP-Authenticated SMTP Relaying Release 1.2 installed on both the
RaQ2 and RaQ3

can someone assist me here, this is a very bad security problem, and people
are abusing it.

I have alst tried the 1.3 version for the Raq3, the problem lies in where
I've updated all the security/system updates that they no longer will work.

I need to fix this as any user can send mail out as a users from my
server... without even using a password.

Can sendmail be set so users have to identify to it with the login and
password as they have to with qpopper to pop there mail?

Or does any one know a way to get pop before relay working on both raq2 and
raq3 with full updates installed.

Need help here... thanks

Benjamin