On 2/27/2014 8:31 PM, Nilesh Govindrajan wrote:
> 
> One more possible way could be not allowing authentication on port
> 25. Is that possible? That way I can be sure that I get only
> incoming mail on port 25.
> 

Yes, that is a fairly common policy -- only allow AUTH on the
submission port, not on port 25.

# main.cf
smtpd_sasl_auth_enable = no
content_filter = amavis-smtp:[127.0.0.1]:10026

# master.cf
submission  inet n   -   n   -     -     smtpd
  -o smtpd_sasl_auth_enable=yes
  -o content_filter=amavis-smtp:[127.0.0.1]:10024
  ... other settings as required





  -- Noel Jones

Reply via email to