On 06/08/2014 03:53 AM, [email protected] wrote: > well, one could say: block them from submission port and don't allow > SASL on 25, but that works only if you are a startup beginning from > scratch, i condsidered that but it would take weeks and months to > explain all customers that they have to fix their client configs > and i see even new configured clients using 25 because the idiotic > MUA's still default to 25 and burrie the port setting somewhere > under "expert" or "extended" settings, so you can't do that if > you have hundrets of customers with all sort of devices
If that's the case then you can put submission on a separate IP address, so that your users can continue to submit to port 25 (and indeed even to the same hostname on port 25) without problem, and it that service will not have to handle MX traffic. In addition to the postfix configuration changes this only requires (1) a free IP address and (2) DNS change. Peter
