Author: roe
Date: 16-02-06 22:51
Unless I misread your article, you recommend to set up port 587 just like port 25, ie. no authentication is required to submit mail for local delivery.
This seems to be rather unwise. You're abusing the submission port for point to point mail transport, something it was not designed for. By doing so, you risk that ISPs will begin to block port 587 too, because it is being (ab)used for transport. The whole point of the submission port is the separation of transport and submission, which allows to block transport from end user address ranges without blocking submission.
I think you really should mandate SMTP AUTH on the submission port, even in such a point to point scenario.
|
|
