On Wed, Dec 22, 2010 at 10:28:01AM +0000, Stuart Bailey wrote:
> > You may be able to use mail marshall as a postfix
> > smtpd_proxy_filter, but that has performance implications you
> > will need to investigate.
> > http://www.postfix.org/SMTPD_PROXY_README.html
>
> Thanks Noel,
> I'll try this today.
>
> Will this method work when SMTP_AUTH is enabled in Postfix? This is the main
> reason for directong mail to postfix before Mail Marshall, since Mail
> Marshall will not do SMTP_AUTH.
>
It may well continue to work, but not necessarily. A pre-queue proxy is
expected to be "transparent", in particular it must generally support
or ignore all ESMTP features supported by Postfix, since largely the
same SMTP commands will be sent through the proxy as were seen from
the upstream client.
This said, "STARTTLS" and "AUTH" are special, since these encrypt and or
authenticate the delivery *channel*, which extends between the original
client and the Internet facing MTA. So proxies DO NOT need to support
the STARTTLS or AUTH SMTP commands, but MUST NOT object to:
MAIL FROM:<sender> AUTH=<mailbox>
OR
MAIL FROM:<sender> AUTH=<>
which may be sent by the connecting client (if that client is an MSA).
--
Viktor.
