SMTP Auth + relay-domains

[tristan...@gmail.com]

Hi Everyone,
I would like to combine SMTP auth and relay-domains but it looks like these methods are mutually exclusive. Do I have that right?

Thanks Tristan
ILAP - as12059

[ste...@rider.edu]

Glad I'm not the only one looking for this.

I also want to still control relay even after smtp auth happens. Right now, it's wide open after auth. Anyone?

[Claus Aßmann]

Tristan wrote:

> I would like to combine SMTP auth and relay-domains but it looks like

What do you mean by "combine"?

> these methods are mutually exclusive. Do I have that right?

No.

"What's the problem you are trying to solve?"

[tristan...@gmail.com]

Hi Claus,
We're finding that auth, on its own, is not sufficient in stopping abuse from some of our Senders. When sessions are authenticated, we see mail being relayed that would be blocked if our relay controls were not bypassed.

I hope I've missed a configuration step. We see this as an increasing important attack vector.

Thank you for your contribution over the years,
Tristan - as12059

[tristan...@gmail.com]

Hi Claus,
To answer your question, once a Sender is authenticated, if the domain of the Sender address does not match relay-domains, then we would like the message to be "relay denied."

Thanks,
Tristan as12059

[Claus Aßmann]

Tristan wrote:

> To answer your question, once a Sender is authenticated, if the domain
> of the Sender address does not match relay-domains, then we would like
> the message to be "relay denied."

You would have to write your own rules to achieve that.
See doc/op/op.*, cf/README, and some internet resources
about rules (Local_check_mail might be the best place
for your requirement).

--
Note: please read the netiquette before posting. I will almost never
reply to top-postings which include a full copy of the previous
article(s) at the end because it's annoying, shows that the poster
is too lazy to trim his article, and it's wasting the time of all readers.