Koozali.org: home of the SME Server

Least risky external SMTP access.

Chris

Least risky external SMTP access.
« on: August 13, 2002, 10:48:49 PM »
I know all the reasons why you should not allow relaying or external SMTP access. However I need a solution. I have a 5.5 box up and running. IMAP is great, and works well for me over POP. I have 5 people with accounts, and all are located in different places and access their email from different ISP's, Computers, and OS's. A few of us do not have other SMTP options, and need to be able to send email from our accounts on the e-smith box, to each other and others out in the internet world.
What is the least risky way of setting this up on the 5.5 box? Preferably something that will also work with virtual domains. I will be setting up a primary and a virtual domain, and need this access for both.

Bill Talcott

Re: Least risky external SMTP access.
« Reply #1 on: August 14, 2002, 12:10:40 AM »
http://forums.contribs.org/index.php?topic=14336.msg54581#msg54581 has lots of info about POP-before-SMTP and other options and the new stuff used in 5.5. Personally, I'm sticking with an older version for now...

Nate

Re: Least risky external SMTP access.
« Reply #2 on: August 14, 2002, 12:13:23 AM »
Use 5.12 with pop-before-smtp, or IMP 3.1 webmail on either 5.12 or 5.5.

Shelby Moore

Re: Least risky external SMTP access.
« Reply #3 on: August 14, 2002, 12:17:46 AM »
Bill is right, stick with 5.1.2  I tried the 5.5 and that was a mistake.  

Shelby

Rich Lafferty

Re: Least risky external SMTP access.
« Reply #4 on: August 14, 2002, 12:55:43 AM »
Shelby Moore wrote:
>
> Bill is right, stick with 5.1.2  I tried the 5.5 and that was
> a mistake.

Hrm, I couldn't find your bug reports. What problems did you encounter?
(Even better, to bugs@e-smith.com, please!)

Of course, hundreds of other installations of 5.5 are running fine --
including all of our internal systems! (If 5.5 fails, we can't work -- can't
get a much better incentive than that!)

Cheers,
--Rich

Shelby Moore

Re: Least risky external SMTP access.
« Reply #5 on: August 14, 2002, 01:20:13 AM »
It isn't a bug, just a lack of how to do it under 5.5 with MailFront.  Nathan, Eric and I tried to get it to work as you can see by the following thread below, but our attempts failed:

http://forums.contribs.org/index.php?topic=14488.msg55264#msg55264

I give a gold star to Nathan for trying.  He spent almost 2 days on my system trying.  Coming up with a solution for 5.5 is beyond my capabilities as I am a Linux newbie.

I think we are all just saying is that if you need a solution today you have to use 5.1.2 or lower as no one has published a solution for 5.5.

Maybe when Tim Larson gets back at the end of this month he might come up with something.  But till then, for those of use who simply don’t have the expertise to solve the problem back to 5.1.2 we go.

Shelby

Rich Lafferty

Re: Least risky external SMTP access.
« Reply #6 on: August 14, 2002, 01:31:37 AM »
Shelby Moore wrote:
>
> I think we are all just saying is that if you need a solution
> today you have to use 5.1.2 or lower as no one has published
> a solution for 5.5.

Ah, my mistake -- I read it as "don't use 5.5 at all", not "don't use 5.5
if you need this contrib".

Cheers,
--Rich

Charlie Brady

Re: Least risky external SMTP access.
« Reply #7 on: August 14, 2002, 01:46:28 AM »
Chris wrote:

> What is the least risky way of setting this up on the 5.5
> box?

Set up VPN connections.

Charlie

Boris

Re: Least risky external SMTP access.
« Reply #8 on: August 14, 2002, 05:07:40 AM »
As Chris mentioned different OS's, VPN may not be universal option.
I would look at "Webconsole" contrib. (ssh client in the applet window). You can use portforwarding feature of it and forward SMTP port to local computer. You even don't need to enable shell for users, just use port forwarding and stay with "type end to exit" screen.
Just a thought.

Charlie Brady

Re: Least risky external SMTP access.
« Reply #9 on: August 14, 2002, 06:05:21 AM »
Boris wrote:

> As Chris mentioned different OS's, VPN may not be universal
> option.

As of a few minutes ago, there is a new option - authenticated SMTP over SSL.

See:

http://www.pagefault.org/e-smith/contrib/index.html#securemail

I haven't tested this option, but I know that Damien's stuff is usually excellent.

Charlie

ralph

Re: Least risky external SMTP access.
« Reply #10 on: August 14, 2002, 11:47:30 AM »
Hi Chris,

fully agree with Charlie B.'s last post - go there and get the stuff, set it up, follow the client how-tos and be happy.

Works great for me and some others - thanks a lot to damien !!!!!!!!

br, ciao,

Ralph