Smtp sender restrictions question

I have the following in my main.cf file for sender restrictions. permitsasl_authenticated,permit_mynetworks,rejectn onfqdnsender,permit
Seems pretty standard, but I have had some students in my district send emails to teachers as [email protected] Now the first thing I am going to do is take the building ip ranges out of the mynetworks and require sasl on all email clients. I think this will stop this from happening.
My question is can a student send an email as a bogus user to someone from mydomain if they don't have some way of sasl authentication? I remember in the past that when my teachers were at home and they would send emails they could send to each other mydomain to mydomain but not outside, mydomain to yahoo.com for example.
So they were not using sasl or mynetworks because they were using their home ip. If that would still be allowed, what can I do.
Thanks for any clarifications!
JL
  Mac OS X (10.4.8)  

I was a little confused by your question, so this may
sound like more of a "buck-shot" approach to your
problem than you would like. I apologize if this
doesn't answer your question directly. However, if I
were you, I would implement Pterobyte's "Frontline
spam defense for Mac OS X Server" located at
http://osx.topicdesk.com/downloads
I have enabled this, it is excellent.
In this PDF file, Pterobyte provides a set of
restrictions for main.cf that optimizes Postfix's
abilities to deal with unwanted mail up-front before
it reaches your content filter.
Concerning your question specifically, are you saying
that a student can send mail using your mail server
without authenticating as long as they are sending to
another user on the server and claiming to have an
email address originating from your TLD?
I believe the student is using terminal or something similar on some of our less restricted osx laptops, he is then sending emails to users in my domain. If I remove the ip range from the building he is in, will it stop him from sending emails? He is making up a return address like [email protected] and sending to [email protected] He might even be using php, but I only want email to go to any user local or not, from the district, if they have set my server requires authentication in an email client.
Will removing the ip be enough to stop this?
Thanks!
JL

Similar Messages

  • Hi I want to change your e-secret questions because I forgot the answers I have tried sending reset questions on my mail and I have not received mail

    hi I want to change your e-secret questions because I forgot the answers I have tried sending reset questions on my mail and I have not received mail
    New mail that I want is [email protected]
    Alternative to the Old one

    From  King Penguin
    If you have a rescue email address set up on your account then you can try going to https://appleid.apple.com/ and click 'Manage your Apple ID' on the right-hand side of that page and log into your account. Then click on 'Password and Security' on the left-hand side of that page and on the right-hand side you might see an option to send security question reset info to your rescue email address.
    If you don't have a rescue email address set up then go to Express Lane  and select 'iTunes' from the list of 'products' in the middle of the screen.
    Then select 'iTunes Store', and on the next screen select 'Account Management'
    Next choose 'iTunes Store Account Questions' or 'iTunes Store account security' (it appears to vary by country) and fill in that you'd like your security questions/answers reset.
    You should get an email reply within about 24 hours (and check your Spam folder as well as your Inbox)

  • SMTP sender issue

    I have a SQR reprot which send report via emails. Recently I have changed the SMTP sender to another e-mail address in the configuration file of app server and did a bounce of application server. Now the issue is that the emails are being sent with the old email address,so what might be the issue?Do we have to change the SMTP sender in the configuration file of the process scheduler?

    Yes, since the SQR are managed by the Process Scheduler, you should modify the prcs config file.
    Nicolas.

  • SMTP send mail message

    SMTP send mail message is giving 'unkown mime version' error(error code 16500). The same mail server works when sending by Netscape mail.Any help greatly appreciated.

    Hi,
    There seem to be a bug in the OGIC_POP.llb\OGIC_POP_ListMessages.vi.
    Or at least it needs customization to process the response from each mail server. If you open the diagram for this VI, you'll see that it is using the "+OK\s" regular expression to reach the end of the string before the msg-number, msg-size list. In your case, this string is "+OK 5 messages (6190 octets)"
    You need to modify the diagram to skip this whole string. One easy way would be to use just "+OK" with the first Match Pattern fuinction and then use an "\r\n" and pass this to the true-case.
    I am attaching a screenshot of this. And I have tested this to work fine -- I get the messages in the array.
    Hope this helps,
    Khalid
    Attachments:
    modified_pop_listmsgs.bmp ‏1083 KB

  • HT5312 when i try to send the questions to my rescue email the option is not available

    i did everything you told me to do on My Apple Id section but when I try to send the question to my rescue e-mail the option is no there

    Alternatives for Help Resetting Security Questions and Rescue Mail
         1. Apple ID- All about Apple ID security questions.
         2. Rescue email address and how to reset Apple ID security questions
         3. Apple ID- Contacting Apple for help with Apple ID account security.
         4. Fill out and submit this form. Select the topic, Account Security.
         5.  Call Apple Customer Service: Contacting Apple for support in your
              country and ask to speak to Account Security.
    How to Manage your Apple ID: Manage My Apple ID

  • HT1657 I send a question two days ago and nobody respond back to me ,it's simple my problem but if I can't get an answer  I have to ask different way. thanks and I will wait but no much

    I send a question but nobody respond back to me
    <Edited By Host>

    You should NOT leave personal info here.
    This is a public forum.
    You are not addressing Apple here.

  • Bug? SMTP send hangs LabVIEW

    I am trying to send an email during an alarm state using the SMTP VIs included with LabVIEW (2013, have not tested 2012).  It seems that the SMTP send VI hangs LabVIEW while it is running to the point that my software doesn't start shutting down because LabVIEW is waiting for SMTP send.
    SMTP send is running parallel to everything else, so it shouldn't cause a hang just because it hasn't finished running.  The UI stops redrawing (i.e. if I open a window in front of the program and close it, LabVIEW doesn't redraw the front panel - I still see the old window), every parallel process in the code stops running, and the cursor changes to the busy cursor while it works away.
    Today at my office, this delay is 3-5 seconds.  Last week when testing at my customer, the delay was 20-30 seconds.  The email always gets sent, but it seems while it is logging into the mail server and doing whatever transactions are necessary, LabVIEW is non-responsive.
    Please note I am sending a 1-2 sentence email with no attachments.  I am not use SLL/TLS, although my server does require a username and password login.
    Is anyone else seeign this?
    Thanks,
    Matthew

    Joel,
    Same behavior.  As I noted in my original post, it locks up at send.  If you have a fast connection to your server and are sending a short messsage, you may not see it.  My server has a delay for loggin in and it is not internal, so it takes 5 seconds or so for it to login, and send the email.  During that time, LabVIEW is non-responsive.
    If you have a quick connection, you may need to try using the vi that sends attachments so the session with the server lasts longer.
    The issue is specifically with vi.lib\smtpClient\Send.vi.  It is password protected, so I cannot determine exactly what is locking up, but it is in there.
    For now, I found an example on the forums that is not very robust, but got me through the immediate problem.  It can send an email without locking up LabVIEW, so I know NI's code is doing something it probably shouldn't be.
    Matthew

  • SMTP send error

    I tried to send email to
    [email protected]
    using SMTP Send File vi
    and then I got an error 2100 saying
    "500 Syntax error, command "MIME-Version: 1.0" unrecognized"
    How can I send email to address like
    [email protected]?
    Thanks.

    I think your issue is the connection to the SMTP server.  First off, the smtp server for gmail (according to gmail help) is smtp.gmail.com, not smtp.google.com.  Secondly, the port for the gmail smtp server is 465, while the SMTP vi's by default open port 25.  Theoretically, you could edit the VI that opens a TCP port, but you would have to resave most of the smtp hierarchy to avoid changing the version saved in vi.lib.  Finally and most importantly, the gmail smtp server requires SSL encryption, which I have no idea how to start implementing. 
    So how do you send mail in LabVIEW? 
    I have had luck communicating with the internal servers set up by our IT dept because they apparently have no authenication or encryption methods to navigate.  In the non-corporate setting, I have also had luck using a free SMTP server.  When using this server, simply type "localhost" for the SMTP server.  Finally, you could take a look at the ActiveX option this post explores.
    Hope this helps.
    Spex
    National Instruments
    To the pessimist, the glass is half empty; to the optimist, the glass is half full; to the engineer, the glass is twice as big as it needs to be...

  • I made my apple Id a long time ago. I do not remember the answers to my security questions but when I send the questions to my email, they get sent to an old email that was deleted. How do I change the email they get sent to?

    I made my apple Id a long time ago. I do not remember the answers to my security questions but when I send the questions to my email, they get sent to an old email that was deleted. How do I change the email they get sent to?

    1. See my User Tip for some help: Some Solutions for Resetting Forgotten Security Questions: Apple Support Communities.
    2. Here are two different but direct methods:
        a. Send Apple an email request at: Apple - Support - iTunes Store - Contact Us.
        b. Call Apple Support in your country: Customer Service: Contacting Apple for support
            and service.
    3. For other queries about Apple ID see Frequently asked questions about Apple ID.
    4. Rescue email address and how to reset Apple ID security questions
    5. For online assistance use Apple - Support - Express Lane

  • I'm trying to buy a song off of iTunes but when it says that it's gonna send my questions to a email it's not my email ..

    I'm trying to buy a song off of iTunes but when it says that it's gonna send my questions to a email it's not my email ..

    We.are.stardust please begin the installation process from the Creative Cloud Desktop application or use a different web browser.  You can find additional details on how to install Flash and Illustrator CC 2014 at Creative Cloud Help | Install, update, or uninstall apps.

  • SMTP send Multiple Atacchement.vi / labVIEW6.1

    こんにちは。
    現在、LabVIEW6.1のインターネットツールキットの中にある
    「SMTP send Multiple Atacchement.vi」を使用してEXCELファイルを
    添付してメール送信しております。
    メールを送信した相手先にメールが確実に届きますが、
    excelファイルのファイル名だけが文字化けしてしまいます。
    excelファイルの中身のデーターは文字化けは発生しておりません。
    excelファイルは日本語で名前をつけています。
    どうしたら、ファイル名だけの文字化けを防ぐことができるのか
    教えてください。
    よろしくお願い致します。

    お世話になっております。
    弊方で使用しているインターネットツールキットとのバージョンが違ったようで
    ファイル名等がこちらの指定しているものと異なっているようです。
    バージョンの違いに気づかず、大変に失礼いたしました。
    こちらのバージョンを変更して確認しましたところ
    確かに、「SMTP Email Format Header Field.vi」ではなくて「SMTP Format Header Field.vi」が有り
    また、その中に「SMTP Email ConvertToJISB64.vi」は有りませんでした。
    本バージョンでの対処方法としましては、「SMTP Format Header Field.vi」を任意の別名で保存した後に
    「header name (Subject: )」という文字列制御器を定数に変更し、空白の文字列にして下さい。
    変更し保存したVIを
    「SMTP send Multiple Atacchement.vi」>>「SMTP send Multiple Atacchements Message.vi」>>「MIME Send File Attachment.vi」>>「MIME Send Separator.vi」の「name」制御器の直後のワイヤに挿入するような形でワイヤし直します。
    元のワイヤを、「header content」端子に接続し、「encoded header line」端子から出力します。
    さらに、「character set」に文字列定数として、「ISO-2022-JP」を入力してください。
    以上の変更で、ファイル名をエンコードして送信できるようになると思われます。
    よろしくお願い申し上げます。

  • GWIA SMTP relay restriction doesn't work

    I am running GWIA on SLES 10 SP2 GW703HP4.
    I have the GWIA SMTP Relay Defaults=Prevent message relaying. Exceptions with allow from 192.168.10.3 to * as the 192.168.10.3 is the alert mail server. When I tried to test the SMTP port to GWIA, I got restrict relay error. If I change Relay Default to "Allow message relaying", that is the only time that I can connect from 192.168.10.3 to send SMTP mail via GWIA.
    I have tried to restarted GWIA everytime I make the change but can't get the exception to work?
    Any suggestion?
    Cheer
    Andy

    I deleted the IP address and added the same entry back, then GWIA relay fine.
    Might be I have bad eyes?? Thanks all for the inputs.
    Andy
    Originally Posted by buckesfeld
    * andyj2009 wrote, On 05/20/2010 11:06 PM:
    > Exceptions with allow from 192.168.10.3 to * as the 192.168.10.3 is the
    > alert mail server.
    Note there are two situations where you don't have to tinker with relaying exceptions at all:
    - the alert mail server sends to internal addresses only
    - the alert mail server can do SMTP authentication.
    Uwe
    Novell Knowledge Partner (NKP)
    Please don't send me support related e-mail unless I ask you to do so.

  • Configuring SMTP Relay Restrictions

    Hi,
    As i know in Exchange server 2003 For a user or computer to relay e-mail messages through an SMTP virtual server, the following two conditions must be met:
    The user or computer can access the SMTP virtual server. (Connection control)
    The SMTP virtual server is configured to relay e-mail messages to other domains. (Relay restriction)
    my question is: in Exchange 2010 there is only relay restriction, what about connection control? how to manage users or computers who can access the smtp?
    thanks,

    Hi,
    You can create a new Receive Connector and bind the computers that you want to allow relaying in it...
    http://exchangeserverpro.com/how-to-configure-a-relay-connector-for-exchange-server-2010/
    Blog |
    Get Your Exchange Powershell Tip of the Day from here

  • Sending mail with SMTP sends it twice

    I'm sending a text mail, and with my ISP's smtp server it works fine. With my employer's SMTP server, I get each mail that is sent twice. I'm not sure why but I know it's not a problem with the code because I've compared the code to the examples and also because it works fine with my ISP's SMTP server. If I use Outlook to send mail with my work SMTP server I get the emails only once. I saw on jGuru someone posted the same question with no response. Any ideas???
    Michael

    hi cunparis,
    I have same problem. I am sending single mail but some time I got 2 mails.and aslo according to sendmail logs the mails are in fact sent twice.I would like to add one more point that this is on HP-UX. So if you have solution share it with us. Thanks in advance.

  • MailAPI SMTP sending error: 'Could not convert socket to TLS'

    I'm stucked with smtp authentication in a project.
    The process works on port 25 with no STARTTLS, but unfortunately our company server uses port 587 and STARTTLS.
    It seems that only the half of the authentication process could be successful, as the server accepts EHLO, but when it switches to secure the program fails with the exception:
    'Could not convert socket to TLS'
    The simplified code (from a sample app) is:
    public void SendMail() throws Exception{
            Properties props = new Properties();
            props.setProperty("mail.transport.protocol", "smtp");
            props.setProperty("mail.smtp.host", "smtpserver");
            props.setProperty("mail.smtp.port", "587");
            props.setProperty("mail.smtp.auth", "true");
            props.setProperty("mail.smtp.auth.ntlm.domain", "codomain");
            props.setProperty("mail.smtp.starttls.required", "true");
            props.setProperty("mail.smtp.auth.mechanisms", "LOGIN NTLM");
            Session mailSession = Session.getDefaultInstance(props, null);
            mailSession.setDebug(true);
            Transport transport = mailSession.getTransport();
            MimeMessage message = new MimeMessage(mailSession);
            message.setSubject("My subject");
            message.setFrom(new InternetAddress("[email protected]"));
            message.setContent("<h1>Hello world</h1>", "text/html");
            message.addRecipient(Message.RecipientType.TO,
                                new InternetAddress("[email protected]"));
            transport.connect("smtpserver", 587, "CODOMAIN\\myaccount", "mypass");
            transport.sendMessage(message,
            message.getRecipients(Message.RecipientType.TO));
            transport.close();
       }

    I'll copy the full message below:
    +2010.06.29. 12:03:10 mailapi_2.Main main+
    SEVERE: null
    javax.mail.MessagingException: Could not convert socket to TLS;+
    nested exception is:
    javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:1652)
    at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:534)
    at javax.mail.Service.connect(Service.java:291)
    at mailapi_2.SimpleMail.SendMail1(SimpleMail.java:59)
    at mailapi_2.Main.main(Main.java:23)
    Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1591)
    at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187)
    at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181)
    at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1035)
    at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:124)
    at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516)
    at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:884)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1096)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1123)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1107)
    at com.sun.mail.util.SocketFetcher.configureSSLSocket(SocketFetcher.java:503)
    at com.sun.mail.util.SocketFetcher.startTLS(SocketFetcher.java:443)
    at com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:1647)
    +... 4 more+
    Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:285)
    at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:191)
    at sun.security.validator.Validator.validate(Validator.java:218)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:126)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:209)
    Could not convert socket to TLS
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:249)
    at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1014)
    +... 14 more+
    Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:174)
    at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238)
    at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280)
    +... 20 more+
    And the output panel before the exception:
    Sending mail...
    DEBUG: setDebug: JavaMail version 1.4.3
    +DEBUG: getProvider() returning javax.mail.Provider[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Sun Microsystems, Inc]+
    DEBUG SMTP: useEhlo true, useAuth true
    DEBUG SMTP: trying to connect to host "smtpserver", port 587, isSSL false
    +220 exch.plt.local Microsoft ESMTP MAIL Service ready at Tue, 29 Jun 2010 12:03:08 +0200+
    DEBUG SMTP: connected to host "smtpserver", port: 587
    EHLO machine.codomain.local
    +250-smtpserver.codomain.local Hello [xxx.xxx.xxx.xxx]+
    +250-SIZE 15728640+
    +250-PIPELINING+
    +250-DSN+
    +250-ENHANCEDSTATUSCODES+
    +250-STARTTLS+
    +250-AUTH GSSAPI NTLM+
    +250-8BITMIME+
    +250-BINARYMIME+
    +250 CHUNKING+
    DEBUG SMTP: Found extension "SIZE", arg "15728640"
    DEBUG SMTP: Found extension "PIPELINING", arg ""
    DEBUG SMTP: Found extension "DSN", arg ""
    DEBUG SMTP: Found extension "ENHANCEDSTATUSCODES", arg ""
    DEBUG SMTP: Found extension "STARTTLS", arg ""
    DEBUG SMTP: Found extension "AUTH", arg "GSSAPI NTLM"
    DEBUG SMTP: Found extension "8BITMIME", arg ""
    DEBUG SMTP: Found extension "BINARYMIME", arg ""
    DEBUG SMTP: Found extension "CHUNKING", arg ""
    STARTTLS
    +220 2.0.0 SMTP server ready+

Maybe you are looking for

  • I want to but cannot cancel Skype Premium

    I have waded through the maze of screens telling me how to cancel Skype premium. I cannot delete my payment method as Skype Premium has to be cancelled first. I cannot go into subscription settings as there is no settings option as described in the h

  • ICal auf iPhone synchronisieren: in iCal gelöschte Ereignisse bleiben im iPhone

    Hallo Apple-Community In meinem iCal-Kalender im iPhone herrscht das Chaos. Ereignisse, die ich ein- oder mehrmals in iCal meines MacBookPro verschoben habe, bleiben beim Syncen mit iTunes auf dem iPhone bestehen. So sind manche Einträge mehrfach vor

  • Overwriting Conditions data during Material Replication from R/3 to SRM.

    Hi,       When creating a new info record and then running the material replication program everything looks OK. However, if for the same material you create a new info record or change the existing info record and then run the material replication,

  • How to i get the exact length of a playlist?

    i am have upgraded iTunes and AMONG the PLETHORA of un-needed and ANNOYING changes.... is the fact the the LENGTH of a playlist is posted at 1.6 or 2.4 etc. i liked how it used to say 1hour 13 minutes can anyone help me switch this back?

  • PLPOD-qkzprfrei radio button in BAPI_INSPECTIONPLAN_CREATE

    Hello Folks,             i am using BAPI_INSPECTIONPLAN_CREATE for creating a data upload program, but i have a requirement to set PLPOD-QKZPRFREI field, but BAPI is not having that field. This field is actually a radio button on actual Transaction f