View Single Post
Old 27th March 2010, 18:47
tuananh87vn tuananh87vn is offline
Join Date: Sep 2009
Posts: 39
Thanks: 8
Thanked 0 Times in 0 Posts

Originally Posted by falko View Post
There are two scenarios where users don't have to authenticate:
1) You send to a rdcipient who is on the server.
2) You send from a client whose IP is listed in mynetworks in /etc/postfix/
For the 2nd scenario, it is likely for those who are logged into the system (as mynetworks specifies

But for the 1st one, although i've placed some restrictions on client (like, client must be from user list), chances are that somebody who knows the emails of some users within the server still use them to spam the server itself. In this case, is it possible to force smtp authentication to any user who wants to use smtp service? (like Gmail, it forces its users to authenticate themselves before doing anything)
Reply With Quote