[opensuse] SMTP (Port 25 and Black List)
I am using SprintPCS as my ISP. I have my own email server. I would like to send my email through my own smtp server. Sprint has Port 25 restricted so i will have to use their smtp server. I was for a while sending email directly with Sendmail/SMTP from my linix machine then sprint caught on and submited all their residentail IP address range to the Black list so no user can send mail directly as it gets stoped by the firewall/Server who checks against the list. I then opened up a gmail account so I can forward my mail through Gmail they shut down that port as gmail doesnt use port 25. So now I am forced to submit all smtp traffic through sprint I get charged $0.25 for every email I send. I signed a two year contract with sprint for this mobile broadband card and i cant upgrade so i can get unlimited usage. I am working on tunneling my traffic through SSH directly to my server does any one have a better Idea. Donald Cowan
os@dcowan.net wrote:
I am using SprintPCS as my ISP. I have my own email server. I would like to send my email through my own smtp server. Sprint has Port 25 restricted so i will have to use their smtp server.
I was for a while sending email directly with Sendmail/SMTP from my linix machine then sprint caught on and submited all their residentail IP address range to the Black list so no user can send mail directly as it gets stoped by the firewall/Server who checks against the list.
For a general mailserver you need to be able to send Mails directly or at least to the relayserver of your choice. Also a static ip address and matching dns mx record and reverse dns record is almost neccessary. The spam level from residential ip ranges has reached levels that is it not just "best practise" to block mails from these ips, it is slowly approaching the limit of "something must happen...".
I then opened up a gmail account so I can forward my mail through Gmail they shut down that port as gmail doesnt use port 25. So now I am forced to submit all smtp traffic through sprint I get charged $0.25 for every email I send. I signed a two year contract with sprint for this mobile broadband card and i cant upgrade so i can get unlimited usage. I am working on tunneling my traffic through SSH directly to my server does any one have a better Idea.
What options are available and reasonable depend a lot on what you are using this server for. Is it just your personal server and you have it because you like to fiddle with server installations or is it a server for mor than one person? If it is just your server: Then you should be able to use the submission port (587) to relay mails through Google. For that you have to enable smtp auth for the client part of postfix. If it is a general server for mor than one person: In that case you can't use a gmail account. Options are: - use a relayserver that is offering ports other than 25, for example the submission port - consider upgrading your account with a static ip and the option to send mails directly - change provider or use a separate isp for your server -- Sandy List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Quoting Sandy Drobic
os@dcowan.net wrote:
I am using SprintPCS as my ISP. I have my own email server. I would like to send my email through my own smtp server. Sprint has Port 25 restricted so i will have to use their smtp server.
I was for a while sending email directly with Sendmail/SMTP from my linix machine then sprint caught on and submited all their residentail IP address range to the Black list so no user can send mail directly as it gets stoped by the firewall/Server who checks against the list.
For a general mailserver you need to be able to send Mails directly or at least to the relayserver of your choice. Also a static ip address and matching dns mx record and reverse dns record is almost neccessary.
The spam level from residential ip ranges has reached levels that is it not just "best practise" to block mails from these ips, it is slowly approaching the limit of "something must happen...".
I then opened up a gmail account so I can forward my mail through Gmail
Yes I have my server hosted on a different ISP. It has multiple host =20 on it so changing the port is not an option. my Isp has blocked use of =20 googles submisson port to force everyone to either use webmail or pay =20 a fee to use their smtp server. Static IP is not an Option. I was =20 thinking about port forwarding through a ssh connection directly to my =20 server. thanks for your input...... Donald
they shut down that port as gmail doesnt use port 25. So now I am forced to submit all smtp traffic through sprint I get charged $0.25 for every email I send. I signed a two year contract with sprint for this mobile broadband card and i cant upgrade so i can get unlimited usage. I am working on tunneling my traffic through SSH directly to my server does any one have a better Idea.
What options are available and reasonable depend a lot on what you are using this server for. Is it just your personal server and you have it because you like to fiddle with server installations or is it a server for mor than one person?
If it is just your server:
Then you should be able to use the submission port (587) to relay mails through Google. For that you have to enable smtp auth for the client part of postfix.
If it is a general server for mor than one person:
In that case you can't use a gmail account. Options are: - use a relayserver that is offering ports other than 25, for example the submission port - consider upgrading your account with a static ip and the option to send mails directly - change provider or use a separate isp for your server
-- Sandy
List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
os@dcowan.net wrote:
Yes I have my server hosted on a different ISP. It has multiple host =20 on it so changing the port is not an option. my Isp has blocked use of =20 googles submisson port to force everyone to either use webmail or pay =20 a fee to use their smtp server. Static IP is not an Option. I was =20 thinking about port forwarding through a ssh connection directly to my =20 server.
Apparently we misunderstood each other magnificently. How many hosts (or better said domains) the server is hosting does not matter. So your problem is, that you have a server which you want to use to send mails. The server is already running and has a static ip. The only trouble is that you can't connect to that server on port 25, because Sprint is firewalling outgoing port 25. In that case the solution is definitely to use Port 587 (submission) to connect to your server. You only need to tell your server to open port 587 and only allow mail submission through that port, if the user authenticates. With Postfix the following lines in master.cf would take care of that: submission inet n - n - - smtpd -o smtpd_sasl_auth_enable=yes -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject This would force users to authenticate. Then you only have to change the setting in your mailclient to connect to port 587. If you want to be thorough, you could add TLS to the mandantory options. I assume that you already have sasl set up to authenticate when you submit mails to your server. -- Sandy List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Thursday 2007-05-17 at 12:10 +0200, Sandy Drobic wrote: ...
The spam level from residential ip ranges has reached levels that is it not just "best practise" to block mails from these ips, it is slowly approaching the limit of "something must happen...".
And sending bona fide emails (and getting them reliably received) is becoming more and more of a feat... :-( - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGTGrHtTMYHG2NR9URAoV2AJ0cE62TGkU8JWl2GQ5vtmxITwodQwCeIvUz 3QM5OV+92f24/H70JK/TLlA= =1stY -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (3)
-
Carlos E. R. -
os＠dcowan.net -
Sandy Drobic