Re: [cobalt-users] How to stop SPAM senders?

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

wcstaff wrote:

> I would first turn on pop b4 SMTP mail relaying. Then they will not (or at
> least it will limit) be able to send using your sendmial, without
> verification. I would check the sendmail logs.

Tom, I believe that you, like many of us, are under a slight
misconception about how POP Before SMTP works.

Many of us believe that POP Before SMTP makes a RaQ more secure, and
that without it anyone can relay through the server.

That's NOT true.  By default fully patched RaQs are quite secure.  Pop
Before SMTP makes them less secure, in that it allows people to log in
via POP to authenticate to allow themselves an arbitrary number of
minutes to relay email through the server.

With POP Before SMTP you CAN really, as long as you have an email
account to verify with, and with POP Before SMTP your clients CAN relay
spam and other email through your server.  Without POP Before SMTP your
clients CANNOT relay any email through your server.

I hope this clears things up a bit.

Jeff
-- 
Jeff Lasman, nobaloney.net, P. O. Box 52672, Riverside, CA  92517 US
Internet & Unix/Linux/Sun/Cobalt Consulting +1 909 778-9980
Our jblists address used on lists is for list email only
To contact us offlist: "http://www.nobaloney.net/contactus.html";