
kwat at mnw
Feb 14, 2012, 4:34 PM
Views: 2493
Permalink
|
|
Re: How to: qmail-smtpd for roaming users.
[In reply to]
|
|
----- Original Message ----- From: "Jeff Schmidt" <jschmidt [at] linuxi86> To: "Kent Watkins" <kwat [at] mnw> Cc: <qmail [at] list> Sent: Tuesday, February 14, 2012 4:19 PM Subject: Re: How to: qmail-smtpd for roaming users. > > > > On Sat, 2012-02-11 at 11:50 -0600, Kent Watkins wrote: >> I was wanting to do this on my qmail server but I was wondering if the >> spambots hit port 587 like they do on port 25? >> ----- Original Message ----- >> From: "Joshua Megerman" <qmail [at] honorablemenschen> >> To: <qmail [at] list> >> Sent: Friday, February 10, 2012 9:27 AM >> Subject: Re: How to: qmail-smtpd for roaming users. >> >> >> > >> >> >> >> On Feb 10, 2012, at 6:13 AM, FC Mario Patty wrote: >> >> >> >>> Guys, I think I've made it. I installed the second qmail-delivery and >> >>> qmail-smtpd to another directory than the first one (/var/qmail2 >> >>> instead >> >>> of >> >>> /var/qmail). Something I did to achieve that are: >> >> >> >> >> >> That was more work than you needed to do. There was no need for a >> >> second >> >> installation of qmail-delivery. All you needed was two qmail-smtpd >> >> processes. Assuming you're using qmail-smptd through tcpserver, all >> >> you >> >> needed to do was start another tcpserver task listening to port 587, >> >> and >> >> using a different set of tcprules. >> > >> > I don't know who would be responsible for doing this, but at this point >> > I >> > think the LWQ setup instructions should probably include doing this by >> > default. I can't say that I've done this for every qmail setup I've >> > ever >> > done, because I've done some that are purely MTA relay hosts, but I >> > always >> > set up a second instance of qmail-smtpd on the submission port for >> > servers >> > with client interaction, and it's become a de-facto standard anyway. >> > >> > Just my $0.02, but since it's so common and there's the potential for >> > confusion (like what the OP did), maybe we can head some of it off by >> > just >> > adding this to the default docs? >> > >> > Josh >> > >> > Joshua Megerman >> > SJGames MIB #5273 - OGRE AI Testing Division >> > You can't win; You can't break even; You can't even quit the game. >> > - Layman's translation of the Laws of Thermodynamics >> > qmail [at] honorablemenschen >> > > top-posting? really? :^) > > it shouldn't matter if they do (I've not seen much illegitimate traffic > to 587), but the idea is to force authentication on 587... > > Jeff > > > Forgive the top posting. It won't happen again. I've now got 2 instances up and running and I'll watch my stats and see what the spam level looks like with relaying denied on port 25.. Thanks for feedback.. Kent
|