[ILUG] ILUG mail server now greylisting

[Colm Buckley]

>  = Martin List-Petersen
>>  = Paolo Marchiori

>> BTW, someone pointed out that this can be a pain for dialup clients;

Dialup clients really should be using their ISP's smtp server, or some 
other server which automatically whitelists them.  On an intermittent 
connection like dialup, there's no other way to ensure that their 
emails are sent in an RFC-compliant fashion.

>> I point out that this can be easily solved implementing SMTP AUTH
>> (and furthermore enhancing security implementing TLS - which is 
>> straightforward
>> if using a fairly decent SMTP server <flamebait>ie, 
>> non-Sendmail</flamebait>)

This would be *possible*, but mildly pointless, as Martin points out.  
I've implemented greylisting on a server which is the MX for a pretty 
busy domain; to implement auth, I'd  have to distribute auth keys to 
everyone who's likely to email that domain, which isn't really 
practical.  AUTH+TLS is most useful when you want to send email via 
"your" server and you want to make sure you're not spoofed - eg: I have 
AUTH+TLS running on camulus, which is the server I use to send personal 
email.

> Besides, if you checked Colm's mail, Linux.ie is running postfix, not 
> sendmail and even on sendmail it's no problem to get TLS, SMTP-AUTH or 
> alike to work.

It's not *trivial* on Postfix-on-Debian, but neither is it particularly 
difficult.  The main obstacle was figuring out what keys to use in the 
sasl database.

	Colm

-- 
Colm Buckley / colm at tuatha.org / +353 87 2469146 / www.colm.buckley.name