secure SMTP and cygnus-sasl handling

[admin]

Hi,

also instead of cyrus-sasl I am now using DRACd.  so I placed the IP address
of 255.255.255.255 127.0.0.1 in the /etc/mail/dracd.allow file.

> Have a firewall block port 25 to this mail server, and only permit 
> the users to talk to 465.  Of course, you are running stunnel on the 
> mail server or it's local network, right?


okay this is a public port 25.

> 
> > are there other applications that I need to consider here?
> 
> Sendmail will do STARTTLS if both sides support it, and you can even 
> configure things to not permit plain text authentication (AUTH LOGIN)
>  unless TLS/SSL has been negotiated.


this is the answer.  can you point me to someplace on how to do this?

- Noah



> 
> -- 
> -chuck
> 
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"