X-Junk-Score: 0 [] X-Cloudmark-Score: 0 [] Return-Path: Received: from [67.96.163.3] (HELO visionresearch.com) by mail.stalker.com (CommuniGate Pro SMTP 5.2.14) with ESMTPS id 54229292 for CGatePro@mail.stalker.com; Fri, 26 Jun 2009 08:37:24 -0700 Received-SPF: pass receiver=mail.stalker.com; client-ip=67.96.163.3; envelope-from=david.modoski@visionresearch.com X-ExtScanner: Niversoft's FindAttachments (free) X-Virus-Scanned: PASSED, no viruses found Received: from [10.18.66.20] (account david.modoski@visionresearch.com) by visionresearch.com (CommuniGate Pro IMAP 5.1.16) with XMIT id 18974476 for CGatePro@mail.stalker.com; Fri, 26 Jun 2009 11:36:24 -0400 Subject: RE: Sending FROM accounts in domain even with authentication enabled Date: Fri, 26 Jun 2009 11:36:22 -0400 Message-Id: <6cfad3beee344c4799f9dd8c3009fbb0@mail.visionresearch.com> In-Reply-To: MIME-Version: 1.0 Thread-Topic: Sending FROM accounts in domain even with authentication enabled Priority: Normal Importance: normal X-MSMail-Priority: normal X-Priority: 3 Sensitivity: Normal Thread-Index: Acn2c9tQdr4GUB6UTW6vP+nnI0RNMg== From: "David Modoski" To: "CommuniGate Pro Discussions" X-MAPI-LastModified: Fri, 26 Jun 2009 11:36:22 -0400 X-Mailer: CommuniGate Pro MAPI Connector 1.51.15.1/1.51.16.4 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Nevermind, I figured out the reason though not sure if there's a way to pre= vent it. Apparently you can issue the "MAIL FROM:" command with an outside email add= ress and then later in the transaction after issuing the DATA command you c= an insert a FROM: within the data portion which appears to over-ride the "M= AIL FROM:" in the header. The only indication is in the long header where t= he "Return Path" is set to the real email address submitted. -----Original Message----- From: CommuniGate Pro Discussions [mailto:CGatePro@mail.stalker.com] On Beh= alf Of David Modoski Sent: June 26, 2009 9:27 AM To: CommuniGate Pro Discussions Subject: Re: Sending FROM accounts in domain even with authentication enabl= ed I understand that concept. However, this does not apply to email originatin= g from our server. I can require that all of OUR users authenticate before = they are allowed to submit email (any other domain on the Internet can subm= it email without authentication). This does work because as I stated when I= connect to the SMTP port and send the FROM command with an account within = our domain I immediately get a notification that the account requires authe= ntication before submitting email. I don't understand how the spammers appe= ar to be bypassing this. I'll need to check out the server logs to see if I= can find any additional information. The exact error message when using a CGP domain account 575 david.modoski@mydomain.com sender requires authentication -----Original Message----- From: CommuniGate Pro Discussions [mailto:CGatePro@mail.stalker.com] On Beh= alf Of Lyle Giese Sent: June 26, 2009 8:21 AM To: CommuniGate Pro Discussions Subject: Re: Sending FROM accounts in domain even with authentication enabl= ed David Modoski wrote: > We have authentication enabled for all of our CGP accounts for sending > email. This requires that the account holder authenticate to the > server before submitting mail. I've tested by connecting to the SMTP > port and using a FROM address within our domain (I'm informed by the > server that this account needs to authenticate before sending mail). > However, I've just started receiving SPAM that is address FROM an > email account within the domain. Anyone have any ideas how that might > be getting through? > > Thanks, > Dave > This requirement is for relaying email, not sending email. You may say what's the difference? Relaying means the email will be relayed/sent to another email server. Sending can include email for here. If you required Authenication for all email, you will be unable to get email from the world as other mail servers won't be able to send email to your domains. Lyle Giese LCR Computer Services, Inc. ############################################################# This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to To switch to the INDEX mode, E-mail to Send administrative queries to ############################################################# This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to To switch to the INDEX mode, E-mail to Send administrative queries to