You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by Barry <yi...@bitrustar.com> on 2011/06/12 03:53:16 UTC

Why does SMTP sending mail w/o authentication?

Hi I am using the James-M3-Snapshot-06012011, I am being confused by smtp
authentication issue.

The smtpserver.xml content as below:

<smtpserver enabled="true">
  <bind>0.0.0.0:25</bind>
  <connectionBacklog>200</connectionBacklog>
  <tls socketTLS="false" startTLS="false">
  </tls>
  <connectiontimeout>360</connectiontimeout>
  <connectionLimit> 0 </connectionLimit>
  <connectionLimitPerIP> 0 </connectionLimitPerIP>
  <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
  <authRequired>true</authRequired>
  <verifyIdentity>true</verifyIdentity>
  <maxmessagesize>0</maxmessagesize>
  <addressBracketsEnforcement>true</addressBracketsEnforcement>
  <handlerchain enableJmx="true">
    <handler class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
    <handler class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>

  </handlerchain>
</smtpserver>

But the smtp server can't do authentication, just saying it allows any user
to send mail. could you please tell me what is wrong here?

Thanks a lot
Barry

Re: Why does SMTP sending mail w/o authentication?

Posted by Eric Charles <er...@apache.org>.
Hi Barry,

It's a matter of days for BETA1 (maybe 2 weeks, the time to have vote, 
uploads in maven, site, doc update...) - code and doc are available, so 
just a matter of doing the release.

BETA1 will be with mailbox-0.2.

You can already customize with with additional mapping... files.
We have example for this in [1].

Are you thinking to other type of customization which would need more 
than configuration, I mean some API,... change in the code?

Tks,
- Eric

[1] 
https://svn.apache.org/repos/asf/james/server/trunk/container-spring/src/main/config/examples/META-INF/


On 12/06/11 07:42, Barry wrote:
> Hi Eric,  when will you plan to release the James BETA1? the JPA-mailbox
> v0.2 will be still used in BETA1? because we have some specified
> requirement, we have to do some customization on JPA-mailbox,
>
> Thanks,
> Barry
>
> 2011/6/12 Eric Charles<er...@apache.org>
>
>> Hi Barry,
>>
>> Yes, you're right.
>>
>> The documentation we will put online with the release of sever beta1 will
>> state for authorizedAddresses in smtpserver.xml
>>
>> If you use SMTP AUTH, addresses that match those specified here will be
>> permitted to relay without SMTP AUTH.  If you do not use SMTP AUTH, and you
>> specify addreses here, then only addresses that match those specified will
>> be permitted to relay.
>>
>> Addresses may be specified as a an IP address or domain name, with an
>> optional netmask, e.g. 127.*, 127.0.0.0/8, 127.0.0.0/255.0.0.0, and
>> localhost/8 are all the same
>>
>> See also the RemoteAddrNotInNetwork matcher in the transport processor. You
>> would generally use one OR the other approach.
>>
>> Tks,
>> - Eric
>>
>>
>> On 12/06/11 03:57, Barry wrote:
>>
>>> Hi maybe I made a mistake here.
>>>
>>> <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>>>
>>> does this line mean the localhost will automatically be authorized? is it
>>> correct?
>>>
>>> Thanks,
>>> Barry
>>>
>>>
>>> 2011/6/12 Barry<yi...@bitrustar.com>
>>>
>>>   Hi I am using the James-M3-Snapshot-06012011, I am being confused by smtp
>>>> authentication issue.
>>>>
>>>> The smtpserver.xml content as below:
>>>>
>>>> <smtpserver enabled="true">
>>>>    <bind>0.0.0.0:25</bind>
>>>>    <connectionBacklog>200</connectionBacklog>
>>>>    <tls socketTLS="false" startTLS="false">
>>>>    </tls>
>>>>    <connectiontimeout>360</connectiontimeout>
>>>>    <connectionLimit>   0</connectionLimit>
>>>>    <connectionLimitPerIP>   0</connectionLimitPerIP>
>>>>    <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>>>>    <authRequired>true</authRequired>
>>>>    <verifyIdentity>true</verifyIdentity>
>>>>    <maxmessagesize>0</maxmessagesize>
>>>>    <addressBracketsEnforcement>true</addressBracketsEnforcement>
>>>>    <handlerchain enableJmx="true">
>>>>      <handler
>>>> class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>>>>      <handler class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>>>>
>>>>    </handlerchain>
>>>> </smtpserver>
>>>>
>>>> But the smtp server can't do authentication, just saying it allows any
>>>> user
>>>> to send mail. could you please tell me what is wrong here?
>>>>
>>>> Thanks a lot
>>>> Barry
>>>>
>>>>
>>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
>> For additional commands, e-mail: server-dev-help@james.apache.org
>>
>>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org


Re: Why does SMTP sending mail w/o authentication?

Posted by Norman Maurer <no...@googlemail.com>.
Hi Barry,

now is the perfect moment to give feedback on the api. Feel free to
post your comments in the issue.

Thanks,
Norman


2011/6/13 Barry <yi...@bitrustar.com>:
> Hi Norman, I also need to be familiar with the related API, because my
> requirement is a little complex.
> If need help on the API, I will talk to you later.
>
> Thanks for your response.
> Barry
>
> 2011/6/13 Norman Maurer <no...@googlemail.com>
>
>> hi barry,
>>
>> so response for your questions:
>>
>> 1) it should e really fast after it was calculated the first time. As
>> the rest just use inmemory values.
>> 2) that really depends on your need. We ship one version that just uße
>> the same quota for all users.
>> 3) It will be part of mailbox-0.3 which should get released within the
>> next two weeks.
>>
>> bye
>> norman
>>
>>
>> Am Montag, 13. Juni 2011 schrieb Barry <yi...@bitrustar.com>:
>> > Hi Norman, cool work. I didn't  think about Max-Message for per user, it
>> is
>> > very useful. But I have several issues:
>> >
>> > 1. How about it's performance? I mean the sending mail effect.
>> > 2. How to point quota for per user? I should put the quota in DB or other
>> > place?
>> > 3. When you release MAILBOX-64?
>> >
>> > Thanks,
>> > Barry
>> >
>> >
>> > 2011/6/13 Norman Maurer <no...@googlemail.com>
>> >
>> >> Hi Barry,
>> >>
>> >> did you see the latest changes in the mailbox project to support quotas
>> ?
>> >> Maybe this would work for you ?
>> >>
>> >> https://issues.apache.org/jira/browse/MAILBOX-64
>> >>
>> >> Bye,
>> >> Norman
>> >>
>> >> 2011/6/12 Eric Charles <er...@u-mangate.com>:
>> >> > On 12/06/11 10:04, Barry wrote:
>> >> >>
>> >> >> Hi Eric, I think we need to customize code and the mapping. We need
>> the
>> >> >> most important feature that quota every mailbox, maybe we need to
>> >> >> implement a new mailet, I see there is a quota-matcher in the current
>> >> >> version, but it is too simple for me. and also need to do some I18N
>> >> >> work. could you please send me the doc in advance? I need to be
>> familiar
>> >> >> with James configuration and mailet/matcher api.
>> >> >>
>> >> >> Thank you very much.
>> >> >>
>> >> >>
>> >> >> 2011/6/12 Eric Charles <eric@apache.org <ma...@apache.org>>
>> >> >>
>> >> >>    Hi Barry,
>> >> >>
>> >> >>    It's a matter of days for BETA1 (maybe 2 weeks, the time to have
>> >> >>    vote, uploads in maven, site, doc update...) - code and doc are
>> >> >>    available, so just a matter of doing the release.
>> >> >>
>> >> >>    You can already customize with with additional mapping... files.
>> >> >>    We have example for this in [1].
>> >> >>
>> >> >>    Are you thinking to other type of customization which would need
>> >> >>    more than configuration, I mean some API,... change in the code?
>> >> >>
>> >> >>    Tks,
>> >> >>    - Eric
>> >> >>
>> >> >>    [1]
>> >> >>
>> >> >>
>> >>
>> https://svn.apache.org/repos/asf/james/server/trunk/container-spring/src/main/config/examples/META-INF/
>> >> >>
>> >> >>
>> >> >>
>> >> >>    On 12/06/11 07:42, Barry wrote:
>> >> >>
>> >> >>        Hi Eric,  when will you plan to release the James BETA1? the
>> >> >>        JPA-mailbox
>> >> >>        v0.2 will be still used in BETA1? because we have some
>> specified
>> >> >>        requirement, we have to do some customization on JPA-mailbox,
>> >> >>
>> >> >>        Thanks,
>> >> >>        Barry
>> >> >>
>> >> >>        2011/6/12 Eric Charles <eric@apache.org <mailto:
>> eric@apache.org>
>> >> >>        <mailto:eric@apache.org <ma...@apache.org>>>
>> >> >>
>> >> >>
>> >> >>            Hi Barry,
>> >> >>
>> >> >>            Yes, you're right.
>> >> >>
>> >> >>            The documentation we will put online with the release of
>> >> >>        sever beta1
>> >> >>            will state for authorizedAddresses in smtpserver.xml
>> >> >>
>> >> >>            If you use SMTP AUTH, addresses that match those specified
>> >> >>        here will
>> >> >>            be permitted to relay without SMTP AUTH.  If you do not
>> use
>> >> >> SMTP
>> >> >>            AUTH, and you specify addreses here, then only addresses
>> >> >>        that match
>> >
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
>> For additional commands, e-mail: server-dev-help@james.apache.org
>>
>>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Re: Why does SMTP sending mail w/o authentication?

Posted by Barry <yi...@bitrustar.com>.
Hi Norman, I also need to be familiar with the related API, because my
requirement is a little complex.
If need help on the API, I will talk to you later.

Thanks for your response.
Barry

2011/6/13 Norman Maurer <no...@googlemail.com>

> hi barry,
>
> so response for your questions:
>
> 1) it should e really fast after it was calculated the first time. As
> the rest just use inmemory values.
> 2) that really depends on your need. We ship one version that just uße
> the same quota for all users.
> 3) It will be part of mailbox-0.3 which should get released within the
> next two weeks.
>
> bye
> norman
>
>
> Am Montag, 13. Juni 2011 schrieb Barry <yi...@bitrustar.com>:
> > Hi Norman, cool work. I didn't  think about Max-Message for per user, it
> is
> > very useful. But I have several issues:
> >
> > 1. How about it's performance? I mean the sending mail effect.
> > 2. How to point quota for per user? I should put the quota in DB or other
> > place?
> > 3. When you release MAILBOX-64?
> >
> > Thanks,
> > Barry
> >
> >
> > 2011/6/13 Norman Maurer <no...@googlemail.com>
> >
> >> Hi Barry,
> >>
> >> did you see the latest changes in the mailbox project to support quotas
> ?
> >> Maybe this would work for you ?
> >>
> >> https://issues.apache.org/jira/browse/MAILBOX-64
> >>
> >> Bye,
> >> Norman
> >>
> >> 2011/6/12 Eric Charles <er...@u-mangate.com>:
> >> > On 12/06/11 10:04, Barry wrote:
> >> >>
> >> >> Hi Eric, I think we need to customize code and the mapping. We need
> the
> >> >> most important feature that quota every mailbox, maybe we need to
> >> >> implement a new mailet, I see there is a quota-matcher in the current
> >> >> version, but it is too simple for me. and also need to do some I18N
> >> >> work. could you please send me the doc in advance? I need to be
> familiar
> >> >> with James configuration and mailet/matcher api.
> >> >>
> >> >> Thank you very much.
> >> >>
> >> >>
> >> >> 2011/6/12 Eric Charles <eric@apache.org <ma...@apache.org>>
> >> >>
> >> >>    Hi Barry,
> >> >>
> >> >>    It's a matter of days for BETA1 (maybe 2 weeks, the time to have
> >> >>    vote, uploads in maven, site, doc update...) - code and doc are
> >> >>    available, so just a matter of doing the release.
> >> >>
> >> >>    You can already customize with with additional mapping... files.
> >> >>    We have example for this in [1].
> >> >>
> >> >>    Are you thinking to other type of customization which would need
> >> >>    more than configuration, I mean some API,... change in the code?
> >> >>
> >> >>    Tks,
> >> >>    - Eric
> >> >>
> >> >>    [1]
> >> >>
> >> >>
> >>
> https://svn.apache.org/repos/asf/james/server/trunk/container-spring/src/main/config/examples/META-INF/
> >> >>
> >> >>
> >> >>
> >> >>    On 12/06/11 07:42, Barry wrote:
> >> >>
> >> >>        Hi Eric,  when will you plan to release the James BETA1? the
> >> >>        JPA-mailbox
> >> >>        v0.2 will be still used in BETA1? because we have some
> specified
> >> >>        requirement, we have to do some customization on JPA-mailbox,
> >> >>
> >> >>        Thanks,
> >> >>        Barry
> >> >>
> >> >>        2011/6/12 Eric Charles <eric@apache.org <mailto:
> eric@apache.org>
> >> >>        <mailto:eric@apache.org <ma...@apache.org>>>
> >> >>
> >> >>
> >> >>            Hi Barry,
> >> >>
> >> >>            Yes, you're right.
> >> >>
> >> >>            The documentation we will put online with the release of
> >> >>        sever beta1
> >> >>            will state for authorizedAddresses in smtpserver.xml
> >> >>
> >> >>            If you use SMTP AUTH, addresses that match those specified
> >> >>        here will
> >> >>            be permitted to relay without SMTP AUTH.  If you do not
> use
> >> >> SMTP
> >> >>            AUTH, and you specify addreses here, then only addresses
> >> >>        that match
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
> For additional commands, e-mail: server-dev-help@james.apache.org
>
>

Re: Why does SMTP sending mail w/o authentication?

Posted by Norman Maurer <no...@googlemail.com>.
hi barry,

so response for your questions:

1) it should e really fast after it was calculated the first time. As
the rest just use inmemory values.
2) that really depends on your need. We ship one version that just uße
the same quota for all users.
3) It will be part of mailbox-0.3 which should get released within the
next two weeks.

bye
norman


Am Montag, 13. Juni 2011 schrieb Barry <yi...@bitrustar.com>:
> Hi Norman, cool work. I didn't  think about Max-Message for per user, it is
> very useful. But I have several issues:
>
> 1. How about it's performance? I mean the sending mail effect.
> 2. How to point quota for per user? I should put the quota in DB or other
> place?
> 3. When you release MAILBOX-64?
>
> Thanks,
> Barry
>
>
> 2011/6/13 Norman Maurer <no...@googlemail.com>
>
>> Hi Barry,
>>
>> did you see the latest changes in the mailbox project to support quotas ?
>> Maybe this would work for you ?
>>
>> https://issues.apache.org/jira/browse/MAILBOX-64
>>
>> Bye,
>> Norman
>>
>> 2011/6/12 Eric Charles <er...@u-mangate.com>:
>> > On 12/06/11 10:04, Barry wrote:
>> >>
>> >> Hi Eric, I think we need to customize code and the mapping. We need the
>> >> most important feature that quota every mailbox, maybe we need to
>> >> implement a new mailet, I see there is a quota-matcher in the current
>> >> version, but it is too simple for me. and also need to do some I18N
>> >> work. could you please send me the doc in advance? I need to be familiar
>> >> with James configuration and mailet/matcher api.
>> >>
>> >> Thank you very much.
>> >>
>> >>
>> >> 2011/6/12 Eric Charles <eric@apache.org <ma...@apache.org>>
>> >>
>> >>    Hi Barry,
>> >>
>> >>    It's a matter of days for BETA1 (maybe 2 weeks, the time to have
>> >>    vote, uploads in maven, site, doc update...) - code and doc are
>> >>    available, so just a matter of doing the release.
>> >>
>> >>    You can already customize with with additional mapping... files.
>> >>    We have example for this in [1].
>> >>
>> >>    Are you thinking to other type of customization which would need
>> >>    more than configuration, I mean some API,... change in the code?
>> >>
>> >>    Tks,
>> >>    - Eric
>> >>
>> >>    [1]
>> >>
>> >>
>> https://svn.apache.org/repos/asf/james/server/trunk/container-spring/src/main/config/examples/META-INF/
>> >>
>> >>
>> >>
>> >>    On 12/06/11 07:42, Barry wrote:
>> >>
>> >>        Hi Eric,  when will you plan to release the James BETA1? the
>> >>        JPA-mailbox
>> >>        v0.2 will be still used in BETA1? because we have some specified
>> >>        requirement, we have to do some customization on JPA-mailbox,
>> >>
>> >>        Thanks,
>> >>        Barry
>> >>
>> >>        2011/6/12 Eric Charles <eric@apache.org <ma...@apache.org>
>> >>        <mailto:eric@apache.org <ma...@apache.org>>>
>> >>
>> >>
>> >>            Hi Barry,
>> >>
>> >>            Yes, you're right.
>> >>
>> >>            The documentation we will put online with the release of
>> >>        sever beta1
>> >>            will state for authorizedAddresses in smtpserver.xml
>> >>
>> >>            If you use SMTP AUTH, addresses that match those specified
>> >>        here will
>> >>            be permitted to relay without SMTP AUTH.  If you do not use
>> >> SMTP
>> >>            AUTH, and you specify addreses here, then only addresses
>> >>        that match
>

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Re: Why does SMTP sending mail w/o authentication?

Posted by Barry <yi...@bitrustar.com>.
Hi Norman, cool work. I didn't  think about Max-Message for per user, it is
very useful. But I have several issues:

1. How about it's performance? I mean the sending mail effect.
2. How to point quota for per user? I should put the quota in DB or other
place?
3. When you release MAILBOX-64?

Thanks,
Barry


2011/6/13 Norman Maurer <no...@googlemail.com>

> Hi Barry,
>
> did you see the latest changes in the mailbox project to support quotas ?
> Maybe this would work for you ?
>
> https://issues.apache.org/jira/browse/MAILBOX-64
>
> Bye,
> Norman
>
> 2011/6/12 Eric Charles <er...@u-mangate.com>:
> > On 12/06/11 10:04, Barry wrote:
> >>
> >> Hi Eric, I think we need to customize code and the mapping. We need the
> >> most important feature that quota every mailbox, maybe we need to
> >> implement a new mailet, I see there is a quota-matcher in the current
> >> version, but it is too simple for me. and also need to do some I18N
> >> work. could you please send me the doc in advance? I need to be familiar
> >> with James configuration and mailet/matcher api.
> >>
> >> Thank you very much.
> >>
> >>
> >> 2011/6/12 Eric Charles <eric@apache.org <ma...@apache.org>>
> >>
> >>    Hi Barry,
> >>
> >>    It's a matter of days for BETA1 (maybe 2 weeks, the time to have
> >>    vote, uploads in maven, site, doc update...) - code and doc are
> >>    available, so just a matter of doing the release.
> >>
> >>    You can already customize with with additional mapping... files.
> >>    We have example for this in [1].
> >>
> >>    Are you thinking to other type of customization which would need
> >>    more than configuration, I mean some API,... change in the code?
> >>
> >>    Tks,
> >>    - Eric
> >>
> >>    [1]
> >>
> >>
> https://svn.apache.org/repos/asf/james/server/trunk/container-spring/src/main/config/examples/META-INF/
> >>
> >>
> >>
> >>    On 12/06/11 07:42, Barry wrote:
> >>
> >>        Hi Eric,  when will you plan to release the James BETA1? the
> >>        JPA-mailbox
> >>        v0.2 will be still used in BETA1? because we have some specified
> >>        requirement, we have to do some customization on JPA-mailbox,
> >>
> >>        Thanks,
> >>        Barry
> >>
> >>        2011/6/12 Eric Charles <eric@apache.org <ma...@apache.org>
> >>        <mailto:eric@apache.org <ma...@apache.org>>>
> >>
> >>
> >>            Hi Barry,
> >>
> >>            Yes, you're right.
> >>
> >>            The documentation we will put online with the release of
> >>        sever beta1
> >>            will state for authorizedAddresses in smtpserver.xml
> >>
> >>            If you use SMTP AUTH, addresses that match those specified
> >>        here will
> >>            be permitted to relay without SMTP AUTH.  If you do not use
> >> SMTP
> >>            AUTH, and you specify addreses here, then only addresses
> >>        that match
> >>            those specified will be permitted to relay.
> >>
> >>            Addresses may be specified as a an IP address or domain
> >>        name, with
> >>            an optional netmask, e.g. 127.*, 127.0.0.0/8
> >>        <http://127.0.0.0/8> <http://127.0.0.0/8>,
> >>        127.0.0.0/255.0.0.0 <http://127.0.0.0/255.0.0.0>
> >>        <http://127.0.0.0/255.0.0.0>, and localhost/8
> >>
> >>            are all the same
> >>
> >>            See also the RemoteAddrNotInNetwork matcher in the transport
> >>            processor. You would generally use one OR the other approach.
> >>
> >>            Tks,
> >>            - Eric
> >>
> >>
> >>            On 12/06/11 03:57, Barry wrote:
> >>
> >>                Hi maybe I made a mistake here.
> >>
> >>        <authorizedAddresses>127.0.0.0/8 <http://127.0.0.0/8>
> >>        <http://127.0.0.0/8></authorizedAddresses>
> >>
> >>
> >>                does this line mean the localhost will automatically be
> >>                authorized? is it
> >>                correct?
> >>
> >>                Thanks,
> >>                Barry
> >>
> >>
> >>                2011/6/12 Barry<yi.bai@bitrustar.com
> >>        <ma...@bitrustar.com> <mailto:yi.bai@bitrustar.com
> >>        <ma...@bitrustar.com>>>
> >>
> >>
> >>                    Hi I am using the James-M3-Snapshot-06012011, I am
> >> being
> >>                    confused by smtp
> >>                    authentication issue.
> >>
> >>                    The smtpserver.xml content as below:
> >>
> >>        <smtpserver enabled="true">
> >>        <bind>0.0.0.0:25 <http://0.0.0.0:25> <http://0.0.0.0:25></bind>
> >>
> >>        <connectionBacklog>200</connectionBacklog>
> >>        <tls socketTLS="false" startTLS="false">
> >>        </tls>
> >>        <connectiontimeout>360</connectiontimeout>
> >>        <connectionLimit>  0</connectionLimit>
> >>        <connectionLimitPerIP>  0</connectionLimitPerIP>
> >>        <authorizedAddresses>127.0.0.0/8 <http://127.0.0.0/8>
> >>        <http://127.0.0.0/8></authorizedAddresses>
> >>
> >>        <authRequired>true</authRequired>
> >>        <verifyIdentity>true</verifyIdentity>
> >>        <maxmessagesize>0</maxmessagesize>
> >>        <addressBracketsEnforcement>true</addressBracketsEnforcement>
> >>        <handlerchain enableJmx="true">
> >>        <handler
> >>
> >>          class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
> >>        <handler
> >>
> >>          class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
> >>
> >>        </handlerchain>
> >>        </smtpserver>
> >>
> >>                    But the smtp server can't do authentication, just
> >>        saying it
> >>                    allows any user
> >>                    to send mail. could you please tell me what is wrong
> >>        here?
> >>
> >>                    Thanks a lot
> >>                    Barry
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>  ---------------------------------------------------------------------
> >>            To unsubscribe, e-mail:
> >>        server-dev-unsubscribe@james.apache.org
> >>        <ma...@james.apache.org>
> >>        <mailto:server-dev-unsubscribe@james.apache.org
> >>        <ma...@james.apache.org>>
> >>
> >>            For additional commands, e-mail:
> >>        server-dev-help@james.apache.org
> >>        <ma...@james.apache.org>
> >>        <mailto:server-dev-help@james.apache.org
> >>        <ma...@james.apache.org>>
> >>
> >>
> >>
> >>
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
> > For additional commands, e-mail: server-dev-help@james.apache.org
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
> For additional commands, e-mail: server-dev-help@james.apache.org
>
>

Re: Why does SMTP sending mail w/o authentication?

Posted by Norman Maurer <no...@googlemail.com>.
Hi Barry,

did you see the latest changes in the mailbox project to support quotas ?
Maybe this would work for you ?

https://issues.apache.org/jira/browse/MAILBOX-64

Bye,
Norman

2011/6/12 Eric Charles <er...@u-mangate.com>:
> On 12/06/11 10:04, Barry wrote:
>>
>> Hi Eric, I think we need to customize code and the mapping. We need the
>> most important feature that quota every mailbox, maybe we need to
>> implement a new mailet, I see there is a quota-matcher in the current
>> version, but it is too simple for me. and also need to do some I18N
>> work. could you please send me the doc in advance? I need to be familiar
>> with James configuration and mailet/matcher api.
>>
>> Thank you very much.
>>
>>
>> 2011/6/12 Eric Charles <eric@apache.org <ma...@apache.org>>
>>
>>    Hi Barry,
>>
>>    It's a matter of days for BETA1 (maybe 2 weeks, the time to have
>>    vote, uploads in maven, site, doc update...) - code and doc are
>>    available, so just a matter of doing the release.
>>
>>    You can already customize with with additional mapping... files.
>>    We have example for this in [1].
>>
>>    Are you thinking to other type of customization which would need
>>    more than configuration, I mean some API,... change in the code?
>>
>>    Tks,
>>    - Eric
>>
>>    [1]
>>
>>  https://svn.apache.org/repos/asf/james/server/trunk/container-spring/src/main/config/examples/META-INF/
>>
>>
>>
>>    On 12/06/11 07:42, Barry wrote:
>>
>>        Hi Eric,  when will you plan to release the James BETA1? the
>>        JPA-mailbox
>>        v0.2 will be still used in BETA1? because we have some specified
>>        requirement, we have to do some customization on JPA-mailbox,
>>
>>        Thanks,
>>        Barry
>>
>>        2011/6/12 Eric Charles <eric@apache.org <ma...@apache.org>
>>        <mailto:eric@apache.org <ma...@apache.org>>>
>>
>>
>>            Hi Barry,
>>
>>            Yes, you're right.
>>
>>            The documentation we will put online with the release of
>>        sever beta1
>>            will state for authorizedAddresses in smtpserver.xml
>>
>>            If you use SMTP AUTH, addresses that match those specified
>>        here will
>>            be permitted to relay without SMTP AUTH.  If you do not use
>> SMTP
>>            AUTH, and you specify addreses here, then only addresses
>>        that match
>>            those specified will be permitted to relay.
>>
>>            Addresses may be specified as a an IP address or domain
>>        name, with
>>            an optional netmask, e.g. 127.*, 127.0.0.0/8
>>        <http://127.0.0.0/8> <http://127.0.0.0/8>,
>>        127.0.0.0/255.0.0.0 <http://127.0.0.0/255.0.0.0>
>>        <http://127.0.0.0/255.0.0.0>, and localhost/8
>>
>>            are all the same
>>
>>            See also the RemoteAddrNotInNetwork matcher in the transport
>>            processor. You would generally use one OR the other approach.
>>
>>            Tks,
>>            - Eric
>>
>>
>>            On 12/06/11 03:57, Barry wrote:
>>
>>                Hi maybe I made a mistake here.
>>
>>        <authorizedAddresses>127.0.0.0/8 <http://127.0.0.0/8>
>>        <http://127.0.0.0/8></authorizedAddresses>
>>
>>
>>                does this line mean the localhost will automatically be
>>                authorized? is it
>>                correct?
>>
>>                Thanks,
>>                Barry
>>
>>
>>                2011/6/12 Barry<yi.bai@bitrustar.com
>>        <ma...@bitrustar.com> <mailto:yi.bai@bitrustar.com
>>        <ma...@bitrustar.com>>>
>>
>>
>>                    Hi I am using the James-M3-Snapshot-06012011, I am
>> being
>>                    confused by smtp
>>                    authentication issue.
>>
>>                    The smtpserver.xml content as below:
>>
>>        <smtpserver enabled="true">
>>        <bind>0.0.0.0:25 <http://0.0.0.0:25> <http://0.0.0.0:25></bind>
>>
>>        <connectionBacklog>200</connectionBacklog>
>>        <tls socketTLS="false" startTLS="false">
>>        </tls>
>>        <connectiontimeout>360</connectiontimeout>
>>        <connectionLimit>  0</connectionLimit>
>>        <connectionLimitPerIP>  0</connectionLimitPerIP>
>>        <authorizedAddresses>127.0.0.0/8 <http://127.0.0.0/8>
>>        <http://127.0.0.0/8></authorizedAddresses>
>>
>>        <authRequired>true</authRequired>
>>        <verifyIdentity>true</verifyIdentity>
>>        <maxmessagesize>0</maxmessagesize>
>>        <addressBracketsEnforcement>true</addressBracketsEnforcement>
>>        <handlerchain enableJmx="true">
>>        <handler
>>
>>          class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>>        <handler
>>
>>          class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>>
>>        </handlerchain>
>>        </smtpserver>
>>
>>                    But the smtp server can't do authentication, just
>>        saying it
>>                    allows any user
>>                    to send mail. could you please tell me what is wrong
>>        here?
>>
>>                    Thanks a lot
>>                    Barry
>>
>>
>>
>>
>>
>>
>>
>>  ---------------------------------------------------------------------
>>            To unsubscribe, e-mail:
>>        server-dev-unsubscribe@james.apache.org
>>        <ma...@james.apache.org>
>>        <mailto:server-dev-unsubscribe@james.apache.org
>>        <ma...@james.apache.org>>
>>
>>            For additional commands, e-mail:
>>        server-dev-help@james.apache.org
>>        <ma...@james.apache.org>
>>        <mailto:server-dev-help@james.apache.org
>>        <ma...@james.apache.org>>
>>
>>
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
> For additional commands, e-mail: server-dev-help@james.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Re: Why does SMTP sending mail w/o authentication?

Posted by Eric Charles <er...@u-mangate.com>.
On 12/06/11 10:04, Barry wrote:
> Hi Eric, I think we need to customize code and the mapping. We need the
> most important feature that quota every mailbox, maybe we need to
> implement a new mailet, I see there is a quota-matcher in the current
> version, but it is too simple for me. and also need to do some I18N
> work. could you please send me the doc in advance? I need to be familiar
> with James configuration and mailet/matcher api.
>
> Thank you very much.
>
>
> 2011/6/12 Eric Charles <eric@apache.org <ma...@apache.org>>
>
>     Hi Barry,
>
>     It's a matter of days for BETA1 (maybe 2 weeks, the time to have
>     vote, uploads in maven, site, doc update...) - code and doc are
>     available, so just a matter of doing the release.
>
>     You can already customize with with additional mapping... files.
>     We have example for this in [1].
>
>     Are you thinking to other type of customization which would need
>     more than configuration, I mean some API,... change in the code?
>
>     Tks,
>     - Eric
>
>     [1]
>     https://svn.apache.org/repos/asf/james/server/trunk/container-spring/src/main/config/examples/META-INF/
>
>
>
>     On 12/06/11 07:42, Barry wrote:
>
>         Hi Eric,  when will you plan to release the James BETA1? the
>         JPA-mailbox
>         v0.2 will be still used in BETA1? because we have some specified
>         requirement, we have to do some customization on JPA-mailbox,
>
>         Thanks,
>         Barry
>
>         2011/6/12 Eric Charles <eric@apache.org <ma...@apache.org>
>         <mailto:eric@apache.org <ma...@apache.org>>>
>
>
>             Hi Barry,
>
>             Yes, you're right.
>
>             The documentation we will put online with the release of
>         sever beta1
>             will state for authorizedAddresses in smtpserver.xml
>
>             If you use SMTP AUTH, addresses that match those specified
>         here will
>             be permitted to relay without SMTP AUTH.  If you do not use SMTP
>             AUTH, and you specify addreses here, then only addresses
>         that match
>             those specified will be permitted to relay.
>
>             Addresses may be specified as a an IP address or domain
>         name, with
>             an optional netmask, e.g. 127.*, 127.0.0.0/8
>         <http://127.0.0.0/8> <http://127.0.0.0/8>,
>         127.0.0.0/255.0.0.0 <http://127.0.0.0/255.0.0.0>
>         <http://127.0.0.0/255.0.0.0>, and localhost/8
>
>             are all the same
>
>             See also the RemoteAddrNotInNetwork matcher in the transport
>             processor. You would generally use one OR the other approach.
>
>             Tks,
>             - Eric
>
>
>             On 12/06/11 03:57, Barry wrote:
>
>                 Hi maybe I made a mistake here.
>
>         <authorizedAddresses>127.0.0.0/8 <http://127.0.0.0/8>
>         <http://127.0.0.0/8></authorizedAddresses>
>
>
>                 does this line mean the localhost will automatically be
>                 authorized? is it
>                 correct?
>
>                 Thanks,
>                 Barry
>
>
>                 2011/6/12 Barry<yi.bai@bitrustar.com
>         <ma...@bitrustar.com> <mailto:yi.bai@bitrustar.com
>         <ma...@bitrustar.com>>>
>
>
>                     Hi I am using the James-M3-Snapshot-06012011, I am being
>                     confused by smtp
>                     authentication issue.
>
>                     The smtpserver.xml content as below:
>
>         <smtpserver enabled="true">
>         <bind>0.0.0.0:25 <http://0.0.0.0:25> <http://0.0.0.0:25></bind>
>
>         <connectionBacklog>200</connectionBacklog>
>         <tls socketTLS="false" startTLS="false">
>         </tls>
>         <connectiontimeout>360</connectiontimeout>
>         <connectionLimit>  0</connectionLimit>
>         <connectionLimitPerIP>  0</connectionLimitPerIP>
>         <authorizedAddresses>127.0.0.0/8 <http://127.0.0.0/8>
>         <http://127.0.0.0/8></authorizedAddresses>
>
>         <authRequired>true</authRequired>
>         <verifyIdentity>true</verifyIdentity>
>         <maxmessagesize>0</maxmessagesize>
>         <addressBracketsEnforcement>true</addressBracketsEnforcement>
>         <handlerchain enableJmx="true">
>         <handler
>
>           class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>         <handler
>
>           class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>
>         </handlerchain>
>         </smtpserver>
>
>                     But the smtp server can't do authentication, just
>         saying it
>                     allows any user
>                     to send mail. could you please tell me what is wrong
>         here?
>
>                     Thanks a lot
>                     Barry
>
>
>
>
>
>
>           ---------------------------------------------------------------------
>             To unsubscribe, e-mail:
>         server-dev-unsubscribe@james.apache.org
>         <ma...@james.apache.org>
>         <mailto:server-dev-unsubscribe@james.apache.org
>         <ma...@james.apache.org>>
>
>             For additional commands, e-mail:
>         server-dev-help@james.apache.org
>         <ma...@james.apache.org>
>         <mailto:server-dev-help@james.apache.org
>         <ma...@james.apache.org>>
>
>
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Re: Why does SMTP sending mail w/o authentication?

Posted by Barry <yi...@bitrustar.com>.
Hi Eric,  when will you plan to release the James BETA1? the JPA-mailbox
v0.2 will be still used in BETA1? because we have some specified
requirement, we have to do some customization on JPA-mailbox,

Thanks,
Barry

2011/6/12 Eric Charles <er...@apache.org>

> Hi Barry,
>
> Yes, you're right.
>
> The documentation we will put online with the release of sever beta1 will
> state for authorizedAddresses in smtpserver.xml
>
> If you use SMTP AUTH, addresses that match those specified here will be
> permitted to relay without SMTP AUTH.  If you do not use SMTP AUTH, and you
> specify addreses here, then only addresses that match those specified will
> be permitted to relay.
>
> Addresses may be specified as a an IP address or domain name, with an
> optional netmask, e.g. 127.*, 127.0.0.0/8, 127.0.0.0/255.0.0.0, and
> localhost/8 are all the same
>
> See also the RemoteAddrNotInNetwork matcher in the transport processor. You
> would generally use one OR the other approach.
>
> Tks,
> - Eric
>
>
> On 12/06/11 03:57, Barry wrote:
>
>> Hi maybe I made a mistake here.
>>
>> <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>>
>> does this line mean the localhost will automatically be authorized? is it
>> correct?
>>
>> Thanks,
>> Barry
>>
>>
>> 2011/6/12 Barry<yi...@bitrustar.com>
>>
>>  Hi I am using the James-M3-Snapshot-06012011, I am being confused by smtp
>>> authentication issue.
>>>
>>> The smtpserver.xml content as below:
>>>
>>> <smtpserver enabled="true">
>>>   <bind>0.0.0.0:25</bind>
>>>   <connectionBacklog>200</connectionBacklog>
>>>   <tls socketTLS="false" startTLS="false">
>>>   </tls>
>>>   <connectiontimeout>360</connectiontimeout>
>>>   <connectionLimit>  0</connectionLimit>
>>>   <connectionLimitPerIP>  0</connectionLimitPerIP>
>>>   <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>>>   <authRequired>true</authRequired>
>>>   <verifyIdentity>true</verifyIdentity>
>>>   <maxmessagesize>0</maxmessagesize>
>>>   <addressBracketsEnforcement>true</addressBracketsEnforcement>
>>>   <handlerchain enableJmx="true">
>>>     <handler
>>> class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>>>     <handler class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>>>
>>>   </handlerchain>
>>> </smtpserver>
>>>
>>> But the smtp server can't do authentication, just saying it allows any
>>> user
>>> to send mail. could you please tell me what is wrong here?
>>>
>>> Thanks a lot
>>> Barry
>>>
>>>
>>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
> For additional commands, e-mail: server-dev-help@james.apache.org
>
>

Re: Why does SMTP sending mail w/o authentication?

Posted by Barry <yi...@bitrustar.com>.
Hi Eric,  when will you plan to release the James BETA1? the JPA-mailbox
v0.2 will be still used in BETA1? because we have some specified
requirement, we have to do some customization on JPA-mailbox,

Thanks,
Barry

2011/6/12 Eric Charles <er...@apache.org>

> Hi Barry,
>
> Yes, you're right.
>
> The documentation we will put online with the release of sever beta1 will
> state for authorizedAddresses in smtpserver.xml
>
> If you use SMTP AUTH, addresses that match those specified here will be
> permitted to relay without SMTP AUTH.  If you do not use SMTP AUTH, and you
> specify addreses here, then only addresses that match those specified will
> be permitted to relay.
>
> Addresses may be specified as a an IP address or domain name, with an
> optional netmask, e.g. 127.*, 127.0.0.0/8, 127.0.0.0/255.0.0.0, and
> localhost/8 are all the same
>
> See also the RemoteAddrNotInNetwork matcher in the transport processor. You
> would generally use one OR the other approach.
>
> Tks,
> - Eric
>
>
> On 12/06/11 03:57, Barry wrote:
>
>> Hi maybe I made a mistake here.
>>
>> <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>>
>> does this line mean the localhost will automatically be authorized? is it
>> correct?
>>
>> Thanks,
>> Barry
>>
>>
>> 2011/6/12 Barry<yi...@bitrustar.com>
>>
>>  Hi I am using the James-M3-Snapshot-06012011, I am being confused by smtp
>>> authentication issue.
>>>
>>> The smtpserver.xml content as below:
>>>
>>> <smtpserver enabled="true">
>>>   <bind>0.0.0.0:25</bind>
>>>   <connectionBacklog>200</connectionBacklog>
>>>   <tls socketTLS="false" startTLS="false">
>>>   </tls>
>>>   <connectiontimeout>360</connectiontimeout>
>>>   <connectionLimit>  0</connectionLimit>
>>>   <connectionLimitPerIP>  0</connectionLimitPerIP>
>>>   <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>>>   <authRequired>true</authRequired>
>>>   <verifyIdentity>true</verifyIdentity>
>>>   <maxmessagesize>0</maxmessagesize>
>>>   <addressBracketsEnforcement>true</addressBracketsEnforcement>
>>>   <handlerchain enableJmx="true">
>>>     <handler
>>> class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>>>     <handler class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>>>
>>>   </handlerchain>
>>> </smtpserver>
>>>
>>> But the smtp server can't do authentication, just saying it allows any
>>> user
>>> to send mail. could you please tell me what is wrong here?
>>>
>>> Thanks a lot
>>> Barry
>>>
>>>
>>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
> For additional commands, e-mail: server-dev-help@james.apache.org
>
>

Re: Why does SMTP sending mail w/o authentication?

Posted by Eric Charles <er...@apache.org>.
Hi Barry,

Yes, you're right.

The documentation we will put online with the release of sever beta1 
will state for authorizedAddresses in smtpserver.xml

If you use SMTP AUTH, addresses that match those specified here will be 
permitted to relay without SMTP AUTH.  If you do not use SMTP AUTH, and 
you specify addreses here, then only addresses that match those 
specified will be permitted to relay.

Addresses may be specified as a an IP address or domain name, with an 
optional netmask, e.g. 127.*, 127.0.0.0/8, 127.0.0.0/255.0.0.0, and 
localhost/8 are all the same

See also the RemoteAddrNotInNetwork matcher in the transport processor. 
You would generally use one OR the other approach.

Tks,
- Eric

On 12/06/11 03:57, Barry wrote:
> Hi maybe I made a mistake here.
>
> <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>
> does this line mean the localhost will automatically be authorized? is it
> correct?
>
> Thanks,
> Barry
>
>
> 2011/6/12 Barry<yi...@bitrustar.com>
>
>> Hi I am using the James-M3-Snapshot-06012011, I am being confused by smtp
>> authentication issue.
>>
>> The smtpserver.xml content as below:
>>
>> <smtpserver enabled="true">
>>    <bind>0.0.0.0:25</bind>
>>    <connectionBacklog>200</connectionBacklog>
>>    <tls socketTLS="false" startTLS="false">
>>    </tls>
>>    <connectiontimeout>360</connectiontimeout>
>>    <connectionLimit>  0</connectionLimit>
>>    <connectionLimitPerIP>  0</connectionLimitPerIP>
>>    <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>>    <authRequired>true</authRequired>
>>    <verifyIdentity>true</verifyIdentity>
>>    <maxmessagesize>0</maxmessagesize>
>>    <addressBracketsEnforcement>true</addressBracketsEnforcement>
>>    <handlerchain enableJmx="true">
>>      <handler
>> class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>>      <handler class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>>
>>    </handlerchain>
>> </smtpserver>
>>
>> But the smtp server can't do authentication, just saying it allows any user
>> to send mail. could you please tell me what is wrong here?
>>
>> Thanks a lot
>> Barry
>>
>>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Re: Why does SMTP sending mail w/o authentication?

Posted by Barry <yi...@bitrustar.com>.
Hi maybe I made a mistake here.

<authorizedAddresses>127.0.0.0/8</authorizedAddresses>

does this line mean the localhost will automatically be authorized? is it
correct?

Thanks,
Barry


2011/6/12 Barry <yi...@bitrustar.com>

> Hi I am using the James-M3-Snapshot-06012011, I am being confused by smtp
> authentication issue.
>
> The smtpserver.xml content as below:
>
> <smtpserver enabled="true">
>   <bind>0.0.0.0:25</bind>
>   <connectionBacklog>200</connectionBacklog>
>   <tls socketTLS="false" startTLS="false">
>   </tls>
>   <connectiontimeout>360</connectiontimeout>
>   <connectionLimit> 0 </connectionLimit>
>   <connectionLimitPerIP> 0 </connectionLimitPerIP>
>   <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>   <authRequired>true</authRequired>
>   <verifyIdentity>true</verifyIdentity>
>   <maxmessagesize>0</maxmessagesize>
>   <addressBracketsEnforcement>true</addressBracketsEnforcement>
>   <handlerchain enableJmx="true">
>     <handler
> class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>     <handler class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>
>   </handlerchain>
> </smtpserver>
>
> But the smtp server can't do authentication, just saying it allows any user
> to send mail. could you please tell me what is wrong here?
>
> Thanks a lot
> Barry
>
>

Re: Why does SMTP sending mail w/o authentication?

Posted by Barry <yi...@bitrustar.com>.
Hi maybe I made a mistake here.

<authorizedAddresses>127.0.0.0/8</authorizedAddresses>

does this line mean the localhost will automatically be authorized? is it
correct?

Thanks,
Barry


2011/6/12 Barry <yi...@bitrustar.com>

> Hi I am using the James-M3-Snapshot-06012011, I am being confused by smtp
> authentication issue.
>
> The smtpserver.xml content as below:
>
> <smtpserver enabled="true">
>   <bind>0.0.0.0:25</bind>
>   <connectionBacklog>200</connectionBacklog>
>   <tls socketTLS="false" startTLS="false">
>   </tls>
>   <connectiontimeout>360</connectiontimeout>
>   <connectionLimit> 0 </connectionLimit>
>   <connectionLimitPerIP> 0 </connectionLimitPerIP>
>   <authorizedAddresses>127.0.0.0/8</authorizedAddresses>
>   <authRequired>true</authRequired>
>   <verifyIdentity>true</verifyIdentity>
>   <maxmessagesize>0</maxmessagesize>
>   <addressBracketsEnforcement>true</addressBracketsEnforcement>
>   <handlerchain enableJmx="true">
>     <handler
> class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
>     <handler class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
>
>   </handlerchain>
> </smtpserver>
>
> But the smtp server can't do authentication, just saying it allows any user
> to send mail. could you please tell me what is wrong here?
>
> Thanks a lot
> Barry
>
>