[Jboss-dev-forums] [Design of Mail Services] - Re: Working on JBMAIL-10

[jeff87 <nu...@jb...>]

OK, I think this might be working. If the recipient e-mail address is in the local domain, it never gets to that part of the code for verify-identity. There are comments that mail going to the local domain does not need authentication.


  | 		// mail to any domain in our local group should be accepted --- that's
  | 		// the free
  | 		// and open world of smtp, where anybody can email anybody. but mail
  | 		// submitted by an
  | 		// unauthenticated user to an unknown domain should get denied.
  | 		String toDomain = rcptAddr.getDomain();
  | 		if (dg.isInGroup(toDomain)) {
  | 			return true; // normal open and free smtp world
  | 		} else if (getState("USER") == null) {
  | 			return false; // no access for unauthenticated users to unknown
  | 						  // domains
  | 		}
  | 

So if I authenticate as "test" and try to send to an address outside the local domain; then an e-mail address like jboss@localhost or te...@ex... will get the error like it should. Should it make that check regardless of the recipient's domain if verify-identity is true?

Thanks,
Jeff

View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3882444#3882444

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3882444