Educause Security Discussion mailing list archives
Re: pros and cons of demanding authentication when sending email
From: Pete Hickey <pete () SHADOWS UOTTAWA CA>
Date: Tue, 8 Nov 2011 16:56:41 -0500
Our supported mail reading applications require authentication, and therefore, most users here will assume that authentication is required to send mail, however our SMTP servers will accept requests from anyone with a campus IP address... this us used by a number of straglers using their own POP and IMAP mail readers... In addition, we have port 25 open outbound for almost everyone. No real issues, although 2-3 times a year we have a bot which starts sending spam, but scripts watching for a large amount of outgoing mail from machines which usually do not send mail let us quickly stop it.... On Tue, Nov 08, 2011 at 04:14:37PM -0500, Charlie Derr wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings esteemed colleagues, I'm looking for feedback on a change that may be upcoming on our network. Up until now we've allowed anyone on-campus (we're a small liberal arts college with only a few hundred resident students) to send email without authentication. We've demanded off-campus connections (via SMTP w/SSL) authenticate with a username and password for many years now. Does anyone still allow unauthenticated sending of emails from on-campus? If you've recently switched your policy to deny this feature, has there been any fallout? thanks much in advance for any info, ~c -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBAgAGBQJOuZu8AAoJELuLPXMxqTZ/PBcP/1tBQ9t6ECZXu1xtEKyAup5A ibv4iEZQA0HIP7rACOj5xp5ItD1/ugpJlaNjzfwf81MwBhr9bMU1ePKtN6aPiRu6 P8J4JtRWwbwdGg+DQ8zs1F/Dl+qVjWZ4Wj3XaF6bjGJ+pB0S6huWsjA841JkY6FP S1WS0iCuvI/cPY39M/mG2lJvf5S1UYJCKkFDMoO1zPekTFqUDcjFCI3cdBlWLHtG UFcgzBpypUmGC5WFNUuo+VQzbL/xGE6u35nyZSRzzJjFlWkhZgKmrtPC3FfGUumr IvhL9mh3WXdrAoPPihFP9nuNNHvT7R9ApZJVrvQClmMJaKwTrNy0FbLJta+p/wfZ LgEkH1f+QfOnB7fJZixJlsHC+8fj4G0tOzuvQKupSmDtYU4LD7m2Xt7jOljrs4D6 htBUH2+P6h6LUTdE08LLyeo0c69cylIhVYgctqccBhyvJ7kzk/+r9CAW8hm9RzHq IrkmsVBPzldX+EaS0Q/bSBWK5Z2mlduiWj1hkd090sg+AAm3mtrKl3qWvMJT87a/ sD9+mnZviuaBvV5Pn4HAEEi2hPTr7WSbDyb00VD0E77CK+3pWqTCBg7NV1KpFGd/ QLU/YuGiJgh6UokLDTn3jLMaqWW+nOKAbTCg0wsFcbO7ObMLmcMkQAZC++JJ8L+Y 8pRbUNjJ+YsrWdpi0QSL =VFF1 -----END PGP SIGNATURE-----
-- Pete Hickey For sale! The University of Ottawa Brooms made by the insane Ottawa, Ontario call Noah Vail Canada 9-999-999-9999999999
Current thread:
- pros and cons of demanding authentication when sending email Charlie Derr (Nov 08)
- Re: pros and cons of demanding authentication when sending email Roger A Safian (Nov 08)
- Re: pros and cons of demanding authentication when sending email Pete Hickey (Nov 08)