* Victor Duchovni <postfix-users@postfix.org>: > On Wed, Dec 29, 2010 at 09:11:41PM +0100, Patrick Ben Koetter wrote: > > > > Perhaps we can encourage better hygiene, by not offering AUTH in > > > postscreen. People who want AUTH and postscreen, can migrate their AUTH > > > users to port 587? Or is this still too much to ask of potential Postfix > > > users? > > > > I guess it is. > > > > The problem is you need to persuade admins that they trade a short period of > > pain - aka switch AUTH from 25 to 587 - in for less pain in the long run > > (more > > selective policies, less spam). > > In the MTA to MTA space, internally, we offer AUTH on 587 between > null-client MTAs and the mailhub. Port 25 is for MX-using MTAs which > have stable IPs and are whitelisted for direct access.
Agreed. > The problem is very likely just ISP MUAs. Which ISPs still make money on > emai users? It seems that Gmail and the other 800lb free-email gorillas > have largely taken over the consumer email market. Is there in fact > a business incentive to offer users submission services on any port > (25 or 587)? In mobile networks, yes. And email usage is rising again, since mobile users found out the can cram more words in a mail than in a SMS. Market shares are mostly assigned. You win when people switch because you have a better price and more comfort. You loose when your aren't cheaper and/or offer less comfort. Marketing fights for those customers who might change. They are extremly allergic to any change that makes them loose customers. It's an absurd situation: They ask admins to offer more features and less spam, but maintain a standstill at the same time. I've seen this last year when we redesigned the mail policy for a large mobile provider and I've seen it again this year with smaller customers. Maybe this will change when marketing realize that less outgoing spam, higher network quality and better deliverabilty means paying business customers who change less often. This said (sorry for the long introduction) I believe companies are not ready to use 587 for AUTH by default unless they have the means lessen or even eliminate the impact of change in policy. p...@rick -- All technical questions asked privately will be automatically answered on the list and archived for public access unless privacy is explicitely required and justified. saslfinger (debugging SMTP AUTH): <http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>