Authenicating users

[Kevin Miller]

Oh, I see what you mean.  From an earlier thread, I got this:

>Sorry to intrude on the list for a slightly OT issue. Tried to email
Mike
>directly but get "<michael@**********.NET>... Deferred: 451 4.3.2 Please
>try again later" so thought I'd try here.

That's milter-sender "fault" (read: feature!). It does a sender
verification, which for some reason fails for your site, hence the
TEMPFAIL.

Original (>) lines mine, Mike's reply below.  So if my premise is wrong,
how might I go about troubleshooting this?  Running on SuSE 9.3, sendmail
8.13.something...

...Kevin
--
Kevin Miller                Registered Linux User No: 307357
CBJ MIS Dept.               Network Systems Admin., Mail Admin.
155 South Seward Street     ph: (907) 586-0242
Juneau, Alaska 99801        fax: (907 586-4500
 

 

________________________________________________________________________________
From: Drew Marshall [mailto:drew at THEMARSHALLS.CO.UK]
Sent: Monday, May 23, 2005 10:48 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Authenicating users

Kevin Miller wrote:
            Surly if your MS boxes are just relays,
            Milter-Ahead should get a 250

reponse when it tries to send your address a challenge message so I
can't see why it shouldn't work. It would fail if it can't verify the
address (Gets a 550 bounce) or can't route the domain/ host.
    

My understainding is Exchange 5.5 doesn't do the milter-ahead thing.  To get
a user list out of 5.5, I'd have to export LDAP data, massage it, etc.
There's a FAQ or a MAQ on setting it up, but it entails bones, feathers,
masks and rattles and I've never felt inclined to tackle it.  Exchange 2003
can easily be set up to reply to an address challenge apparently so when
we're on it, milter-ahead should respond appropriately.  Can't wait...
  

Agreed but the point is that if you send a message to a machine that is
running Milter-Ahead, that machine sends back a probe message to check
you (The sender) have a valid return address. It will connect to the MS
box on the edge of the original sender's network. If that box only relays
and doesn't do any form of recipient checking (As you may have in an
Exchange 5.5 set up, if you don't import the users etc) then the probe
will be accepted as being addressed to a valid user. Therefore in the
situation described there should be no reason why Milter-Ahead should
fail (Unless there is something more fundamental wrong with the message
sent in the first place).

Drew

--
In line with our policy, this message has been scanned for
viruses and dangerous content by MailScanner, and is
believed to be clean. ------------------------ MailScanner list
------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/)
and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/)
and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!