Re: [cobalt-users] Pop-Before-Relay on XTR

[Bruce Timberlake <bruce@xxxxxxxxxx>]

>   1) The problem is when I configure Outlook Express, and I don't mark
>the box of My Server Requires Authentication.
>
>    I always can send  email's to the internal users of the server.

Yes, as you should be able to. Sending mail into a server is NOT
relaying.

Inbound mail for a valid account should always be accepted (procmail/
anti-spam/ etc notwithstanding)

>    2) Also I found it is better to have empty the "Relay for the
>following Hosts/Domains", because if some one knows your domain, they
>can sent with out any POP-BEFORE-RELAY.

The "base" domain (example.com) for each site on your server is listed
here by default, I believe, to ensure that the server itself can send
mail out for each of those domains.  If your customers aren't using
the RaQ as a mail relay, though, then it should be safe to remove them
as you've suggested.