Koozali.org: home of the SME Server

disable smtp auth for local lan

Offline jameswilson

  • *
  • 792
  • +0/-0
    • Security Warehouse, trade security equipment
disable smtp auth for local lan
« on: July 03, 2017, 05:53:31 PM »
Hi all
I've searched for this and found a way to create a template fragment for individual ip addresses but not for all local lan
The problem i have we have an application which i cant add auth details for so id like to allow all local ip addresses to be able to send email without auth

Is there a way?

Thanks


Offline jameswilson

  • *
  • 792
  • +0/-0
    • Security Warehouse, trade security equipment
Re: disable smtp auth for local lan
« Reply #2 on: July 03, 2017, 08:27:26 PM »
doh

Thanks

So if I run the first command that will allow any ip on the local lan send email on port 25 without auth?

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: disable smtp auth for local lan
« Reply #3 on: July 03, 2017, 08:32:46 PM »
You don't want it, really
Just enable the clients you need

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: disable smtp auth for local lan
« Reply #4 on: July 04, 2017, 01:01:10 AM »
jameswilson

If you open your whole LAN to non auth access to smtp server, then viruses or hackers can more easily send spam from infected or vulnerable workstations, which is very undesirable.

If your application only accesses the smtp server from one IP, you could use the third command to control Auth by IP (ie based on the local LAN IP for each connected device).

You would firstly configure (in console) the DHCP auto allocation range to be very small/limited.
Then in Hostnames and Addreses panel you enter MAC address for each connected local device (workstation etc) & the specific LAN IP to be force allocated by DHCP to that workstation (so that device always has the same IP issued by DHCP).

Then use the command mentioned to only allow non auth access for the device IP your errant application is using (or maybe  for only for those workststion IPs that use that application ?).
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline jameswilson

  • *
  • 792
  • +0/-0
    • Security Warehouse, trade security equipment
Re: disable smtp auth for local lan
« Reply #5 on: July 04, 2017, 03:23:15 AM »
Your right i will just enable the few pcs that run the software rather than all

Thanks
James