Re: Secure relay from specific internet host to internet

2013-04-22 Thread Jan P. Kessler
> Very well. If adding the IP address to mynetworks provides sufficient > security against abuse of my server, I will leave it to that. TCP and therefore SMTP is a bidirectional protocol (SYN-ACK and such). If you really estimate an attacker between you and the remote end, you will need *verified

Re: Secure relay from specific internet host to internet

2013-04-22 Thread Viktor Dukhovni
On Mon, Apr 22, 2013 at 03:01:04PM +0200, L.W. van Braam van Vloten wrote: > > While it's easy enough to spoof single IP packets, it's far more > > difficult to spoof a whole SMTP conversation. > > Very well. If adding the IP address to mynetworks provides sufficient > security against abuse of my

Re: Secure relay from specific internet host to internet

2013-04-22 Thread L.W. van Braam van Vloten
Hi, While it's easy enough to spoof single IP packets, it's far more difficult to spoof a whole SMTP conversation. Very well. If adding the IP address to mynetworks provides sufficient security against abuse of my server, I will leave it to that. Thanks for the advice. Lucas

Re: Secure relay from specific internet host to internet

2013-04-18 Thread Noel Jones
[please don't top-post. thanks.] On 4/18/2013 11:09 AM, Lucas van Braam van Vloten wrote: > Hi, > Thanks for your replies. I know how to allow relay by its IP address > but I'm just afraid that it would be easy to fake an up address and > use my server as a spam relay. While it's easy enough to

Re: Secure relay from specific internet host to internet

2013-04-18 Thread Lucas van Braam van Vloten
Hi, Thanks for your replies. I know how to allow relay by its IP address but I'm just afraid that it would be easy to fake an up address and use my server as a spam relay. I would prefer to combine this with some form of authentication. Would you happen to know a good manual for setting up SASL

Re: Secure relay from specific internet host to internet

2013-04-18 Thread Viktor Dukhovni
On Thu, Apr 18, 2013 at 04:31:41PM +0200, L.W. van Braam van Vloten wrote: > Could you please advise what would be the preferred, secure approach to > achieve this? When you say "secure", what security mechanisms are acceptable? You could operate a TLS protected submission service that the other

Re: Secure relay from specific internet host to internet

2013-04-18 Thread Ralf Hildebrandt
* L.W. van Braam van Vloten : > Hello list, > > I would like to to use my postfix implementation to relay mail from one > specific host on the internet, to any address on the internet. The idea is > that the external host will send name in my name, i.e. it will appear to > come from my domain. >

Secure relay from specific internet host to internet

2013-04-18 Thread L.W. van Braam van Vloten
Hello list, I would like to to use my postfix implementation to relay mail from one specific host on the internet, to any address on the internet. The idea is that the external host will send name in my name, i.e. it will appear to come from my domain. I can allow the specific IP address to us