SMTP authentication for broadband providers

Wed Feb 11 20:23:18 UTC 2004

On Wed, 11 Feb 2004 15:13:30 EST, Sean Donelan said:

> So is it time for ISPs to start blocking port 587 too?

RFC2476 says:

3.2.  Message Rejection and Bouncing

   MTAs and MSAs MAY implement message rejection rules that rely in part
   on whether the message is a submission or a relay.

   For example, some sites might configure their MTA to reject all RCPT
   TOs for messages that do not reference local users, and configure
   their MSA to reject all message submissions that do not come from
   authorized users, based on IP address, or authenticated identity.

Is there any indication that there are enough sites *NOT* doing some
sort of authentication check on accepting messages on port 587 that
it's worth the effort of blocking?

Or should we just say "Submit mail via webmail, let's see the ISP block *THAT*"?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20040211/6521f7cc/attachment.sig>