> qmail seems to have some neat features to combat spamming and
> relaying, such as integration between qmail and its own pop
> mail server (that worries me a bit, as I'd prefer to keep using
> the Qualcomm poppper), that way you can allow outside clients to
> authenticate, check mail, and relay mail without opening yourself up
> to relay attacks. (sure you can do this in sendmail, but it imposes
> too many restrictions on mobile users).
Hm. The typical way to do this is to have your mailer refuse relayed
SMTP connections from an IP address unless there's been a successful
POP3 authentication from that address in the past ten minutes (or
whatever time you feel is appropriate). This has been done with
sendmail, but the technique could be applied to any mailer along
with any pop server; I don't see why you couldn't do it with qpopper
and qmail.
What restriction does this place on mobile users?
cjs
Curt Sampson cjs@portal.ca Info at http://www.portal.ca/
Internet Portal Services, Inc. Through infinite mist, software reverberates
Vancouver, BC (604) 257-9400 In code possess'd of invisible folly.