text_combined: mouss qpeqrnetoyennet david b funk wrote jo didnt read chriss statement closely conscientious mail server administrator configure server accept encrypted connections smtpauth transactions server enforce encryption requirements religious war declaration ok let see say p consciensomething admin knows always case encryption security depends implementation code environment random number generation specification example consciensomething admin knows thing like httpwwwhenlichdemozsmtp consciensomething knows linking large library like openssl otherwise quite safe mta adds opportunities system compromise consciensomthing admin prefers open relay zombie consciensomthing admin knows possible protect logins without tls data protection needed pgp smime provide endtoend something server thing provide sure clients support secure authentication methods goes starttls dont tell obsolete smtps conscienseomthing admins dont implement obsolete things consciensomething admin knows unless client certificates used starttls doesnt help dictionary attacks performed botnets cant block one ip admin knows deploying client certificates andor assisting users come free unless work givernment organization financed public taxes even conscien admin wont spend peoples money frivoulously consciensomething admin knows private key somewhere system protecting come free course consciensomething admin setup ipsecssh tunnel care starttls still feel consciencious maybe maybe still enforce starttls come tls nice thus matter client wants server let client continue smtpauth transaction completed starttls operation case smtps already encrypted back skips question possibly easiest way solve problem would run two smtp servers one port 25 full spamav scanning regular mail traffic one ports 587 645 smtpauthtls users clients submit messages one av scanning possibly limited spam scanning fully agreed returnpath xoriginalto jllocalhost deliveredto user7gvcceaschallengecc received radishjmasonorg localhost 127001 radishjmasonorg postfix esmtp id 15413333a3 fri 12 oct 2007 093031 0100 ist xspamvirus xspamcheckerversion spamassassin 330r574664 20070911 somanfdntechcom xspamrelaysexternal ip140211119 rdnsminotaurapacheorg helominotaurapacheorg bysomanfdntechcom ident envfrom intl0 ida1bd126936f auth msa0 ip140211112 rdnshermesapacheorg helomailapacheorg byminotaurapacheorg ident envfrom intl0 id auth msa0 ip14021111136 rdnsathenaapacheorg heloathenaapacheorg byapacheorg ident envfrom intl0 id auth msa0 ip140211114 rdns140211114 helobrutusapacheorg byapacheorg ident envfrom intl0 id auth msa0 xspamstatus score20 required50 testsawlbayes_00 dkim_policy_signsomespf_fail shortcircuitno autolearnno version330r574664 xspamrelaysinternal xspamrelaysuntrusted ip140211119 rdnsminotaurapacheorg helominotaurapacheorg bysomanfdntechcom ident envfrom intl0 ida1bd126936f auth msa0 ip140211112 rdnshermesapacheorg helomailapacheorg byminotaurapacheorg ident envfrom intl0 id auth msa0 ip14021111136 rdnsathenaapacheorg heloathenaapacheorg byapacheorg ident envfrom intl0 id auth msa0 ip140211114 rdns140211114 helobrutusapacheorg byapacheorg ident envfrom intl0 id auth msa0 xspamrelaystrusted xspamlevel xspamrbl 14021111130 10 mx1usapacheorg 10 mx1euapacheorg xoriginalto user7gvcceaschallengecc deliveredto jlmailfdntechcom received localhost 127001 radishjmasonorg imap fetchmail632 singledrop fri 12 oct 2007 093031 0100 ist received minotaurapacheorg minotaurapacheorg 140211119 somanfdntechcom postfix smtp id a1bd126936f fri 12 oct 2007 032600 0500 cdt received qmail 17382 invoked uid 1833 12 oct 2007 082559 0000 deliveredto jllocusapacheorg received qmail 17358 invoked network 12 oct 2007 082558 0000 received hermesapacheorg helo mailapacheorg 140211112 minotaurapacheorg smtp 12 oct 2007 082558 0000 received qmail 85191 invoked uid 500 12 oct 2007 082545 0000 deliveredto nwnktvbuapacheorg received qmail 85164 invoked uid 500 12 oct 2007 082545 0000 mailinglist contact moptqmdspamassassinapacheorg run ezmlm precedence bulk listhelp listunsubscribe listpost listid deliveredto mailing list xrhspamassassinapacheorg received qmail 85153 invoked uid 99 12 oct 2007 082545 0000 received athenaapacheorg helo athenaapacheorg 14021111136 apacheorg qpsmtpd029 esmtp fri 12 oct 2007 012545 0700 xasfspamstatus hits1000 required100 testsall_trusted received 140211114 helo brutusapacheorg 140211114 apacheorg qpsmtpd029 esmtp fri 12 oct 2007 082557 0000 received brutusapacheorg postfix userid 33 id f31bd71420a fri 12 oct 2007 012506 0700 pdt qydlqcwsiacfymbugzillaspamassassinorg xrhspamassassinapacheorg subject bug 5681 add new headers xoriginating messageid 5681470f2f622c2f2c40devspamassassinapacheorg inreplyto 5681devspamassassinapacheorg references 5681devspamassassinapacheorg xbugzillareason assignedto date fri 12 oct 2007 012506 0700 pdt xviruschecked checked clamav apacheorg httpissuesapacheorgspamassassinshow_bugcgiid5681 additional comments uplfreebsdorg 20071012 0125 created attachment id4156 httpissuesapacheorgspamassassinattachmentcgiid4156actionview patch add new fields receiving mail assignee bug watching assignee wed 06 aug 2008 094127 0200 advice mta blacklist