[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] [Raq-2] E-mail Authentication



Well SMTP authentication is completely different from POP before SMTP so
please specifically ask your users not to check the box.
SMTP authentication allows the usernames and passwords to be verified by
SMTP service itself without actually involving the POP service at all except
perhaps both are using the same authentication system at the backend.

Regards
--

Tarun Dua
----- Original Message -----
From: "Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Wednesday, July 31, 2002 10:23 PM
Subject: RE: [cobalt-users] [Raq-2] E-mail Authentication


> > Thanks, Dan - I understand the relay risk you and Gerald
> > brought up. Fortunately, he comes from a teeny-tiny local
> > ISP, and I think the risk exposure is minimal.
>
> Then I bet his tiny ISP has an SMTP server he can use. All he gets by
> using your SMTP is an extra hop in his SMTP from his ISP to you. Maybe
> it's the kewl factor of putting his own domain in Outlook as the SMTP.
>
> >
> > Hmmm - interesting idea.  So you're saying that if he
> > authenticates into one account, the Raq will use that
> > authentication for any other accounts as well?
>
> It's just a list of IPs. It doesn't break them down by domain. If your
> customer signed off and a spammer signed on in that 15 minute window,
> the spammer would be able to relay via your server. Not too likely to
> happen though.
>
> >
> > > Otherwise they need to see if their client has the checkbox for "My
> > > outgoing (SMTP) server requires authentication"
> >
> > I thought - perhaps mistakingly so - that the "My outgoing
> > server requires authentication" business was separate than
> > the POP before SMTP.  I just assumed that he could check that
> > box, but it would have no impact.
>
> I thought the authentication causes the program to POP the server before
> it tries SMTP. I don't offer SMTP to my customers as they have an ISP
> for that.
> --
> Dan Kriwitsky
> 
>
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users