Slashdot Mirror
SMTP AUTH and ODMR Providers for Personal SMTP Service?
no_such_user asks: "After a few years of successfully running a personal mail server at home via my residential cable modem, some organizations (i.e. AOL) and spam filters are now denying SMTP connections originating from residential/dynamic networks. Additionally, my ISP will likely block incoming SMTP traffic at some point. While I applaud these attempts to fight spam, I enjoy the freedom I have running my own mail server, and don't want to switch to a mail hosting provider using POP/IMAP/Webmail. What I need is a provider which does both ODMR (on-demand mail routing) and SMTP AUTH. Unfortunately, the only provider I've found is outside my country (US) and is more expensive than I was hoping for. Without switching to 'business class' internet service, what are my alternatives so that I can continue to run my own mail server without spending a fortune? I don't mind being subject to reasonable daily transfer limits or speed limits to prove I'm not out to spam anyone. Perhaps these is something like a DynDNS service for mail? Or perhaps someone provides permanent IP addresses which I can add to my server via VPN?"
Or perhaps someone provides permanent IP addresses which I can add to my server via VPN?
Let's face it, with the way things are going thesedays, the chances are that ISPs are going to become even bigger losers about blocking services for their customers. My ISP (Rogers Cable in Toronto) has in recent months chosen to block P2P (more than just block it, if it discovers you using a gnutella client, all traffic to your IP is suspended until you stop using that application).
So it seems to me that the idea of using a colocated server that creates a VPN to you could be the best bet. Pretty much any hosting company that can provide you with a *nix box should be suitable as long as you have enough control over your hosting box to install something like IPSec and tell it to route traffic for you. This solution may be a bit costly (considering it will be over and above you ISP charges), but lots of hosting companies provide such solutions. And, you're protected from your ISP changing their policies somewhere down the line.
You, and every other spammer. You want to run your own mail server unchecked, but then you complain about all the spam you get. Can't have it both ways.
But, back to the topic at hand: running one's own mail server (and, in my case, sinking one's own email). They let me do this, as a matter of course: it was a standard part of their AUP that I could run whatever server I wanted as long as it wasn't "abusive". In this context, this meant no open relay (well, duhhh!), and, of course, no high-traffic web sites. I had ssh, and smtp open.
I had no trouble with originating my own email -- of course, I had a static IP address out of the ISP's repertoire (no, they didn't charge extra for it -- these guys were cool: when I expressed concern that they'd go PPPoE, they mentioned, "our techs looked at it, saw it was disgusting, and rejected it". Naturally, I responded, "sign me up!").
Back in Canada, I find I can't get a static IP from any cable provider (surprise, surprise), and a static IP from the only decent DSL provider will run me around CA$100 a month. Of course, at that price, I can sink (and, within reason, serve), whatever I want.
I'm afraid you'll have to go with a business service.
You could've hired me.
That's what you are going to have to do....buy the Business account.
Why not configure your upstream SMTP server as a smarthost on your SMTP server? That way outgoing mail from your MTA is sent to your ISPs MTA for delivery.
Prevent email address forgery. Publish SPF records for y
Your problem is twofold:
(1) Sending email.
(2) Receiving email.
Part 1 is not a problem: You merely have to relay your outgoing email through your service provider's SMTP server. This is the way that you should your outbound email configured anyway, you're incorrectly configured if you're not passing mail upstream through your ISP.
ISPs that know what they're doing from a technical standpoint allow you to send mail through their servers with whatever "from" address you want - so long as you're within their network, they know who you are anyway and can still monitor spam attempts. I have Earthlink DSL and they let customers do this (they've allowed this since way back when I was a dial-up customer). For example, I can send outbound email through Earthlink's servers with the "from" field being my Yahoo or work email address. Of course, I can't do this outside their network (500 access denied messages up the whazoo) - when I'm at work and want to send mail "from" my Earthlink account, I use my work's SMTP server.
Part 2 is more tricky. If direct SMTP connections are disallowed to your home system, perhaps the trick would be to get it delivered to an external server that you can then poll every 10 minutes (or get it forwarded to the email address your ISP provided for you, then poll that?) There are a number of companies that can relay mail for you and forward it to another account from your domain - Yahoo being one of them.
Also: You mention DynDNS - Dns2go.com had a mail relay service at one point (I've not used their system since it went commercial) that may be exactly what you're looking for in terms of receiving mail.
Personally though, I like keeping my DSL connection free of automated transfers and manually pull mail from my ISP's POP servers, Yahoo's web mail (search for the "fetchyahoo" perl script) and Hotmail (search for "gotmail" script) to local mail storage. The last thing I'd want is for all that to be triggered and start downloading spam while I'm trying to play a game online.
If you're running a home SMTP server off of a non-business link, you are barking up the wrong tree. Until everyone raises the expense bar on spamming efforts, spamming won't seem any less interesting to spammers.
Get a business connection, they're only 95$ CDN a month.
--
Internet Explorer (n): Another bug -- that is, a feature that can't be turned off -- in Windows.
Nevermind, I just checked their site and it seems as though one of their other products is mass-email spamming / "marketing" software. It's probably best to not support them.
If you use a portion of your coloc to host your open source project, you can get the coloc for $45 USD a month. For that, you get the following:
- - root on your own server
- - Full Linux Filesystem
- - 4 gigs disk - Up to 10 IPs
- - 40 Gigs transfer / Month
- - Firewall access
- - Unlimited tech support
- - They supply the hardware
Doing this, it is very easy to set up your own mail/web/etc server without many of the problems you get from hosting those services at home.Just an idea.
Beware, the following post is slightly off-topic, as it doesn't really offer any advice to the poster, but the poster's question prompted me to write this...
While I applaud these attempts to fight spam,
That's your first problem. Efforts like this are largely starting what I'm calling the second "Digital Divide". The first (and traditional) digital divide is between those who have the resources to get online and those who do not. However, I'm noticing a second division amoung those who are online -- those who are able to consume and create content and those who are only allowed to consume it. Most ISPs are moving towards the consume only model. Whether it's through artificial upload caps or through overly restrictive AUPs, it seems that most people are only clients on the Internet.
Right now, for example, I am apparently not allowed to serve web pages over my (expensive) cable connection for any reason whatsoever. It doesn't matter that I would be using very little bandwidth, or that it was for personal use, I'm not allowed to serve content on the Internet. This unfortunately, is being done by a technical block (incoming port 80 is firewalled off) and not a legal one (of their many AUPs, the only reference I can find to servers is that all servers must be secure). But the effect is the same.
It seems that more and more, only businesses are allowed to be creators. And "business class" service is really just the regular service but without the artifical limitations. And I should pay twice as much (or more) for that?
This assult on email by AOL and others is just another indication for this phenomenon (I don't think it's happening by design any more than the first digital divide happened by design). AOL, in it's attempt to fight an onslaught of worthless spam, has started blocking thousands of innocent emailers. I don't condone this any more than I would condone sending an innocent man to prison in order to convict a thousand guilty men or dropping a nuclear bomb on Bagdahd to get Saddam. Some people would be OK with things like that, but that's not the sort of ends justify the means world I want to live in. Frankly, AOL should be kicked off the net for their actions, but I know that's not going to happen because too many people either agree that the ends justify the means, or just don't give a damn because it doesn't affect them.
So, maybe I'm just a little too idealistic here, but these things just shouldn't be happening. I don't know what the end outcome will be. Maybe the Internet will become like TV -- still having some worth and still a big part of people's lives, but missing it's potential (TV, like radio before it, was supposed to bring about an age of enlightenment, or at least knowledge in the population). Maybe a sub-Internet will form over the existing Internet (possibly encryped and/or hidden) that allows people to be creators. Maybe wireless will change everything.
I don't know the future and I don't have any good solutions. This is just what I see happening now.
"Save the whales, feed the hungry, free the mallocs" -- author unknown
Wow, what a coincidence, I've been researching the same topic recently.
Here are two providers that I've found so far:
Both of these providers seem to meet my needs and have reasonable pricing, under $20/year. There were some other business-class services out there that I ruled out due to $100+ monthly costs.
You can see here http://slashdot.org/comments.pl?sid=60679&cid=5724 232 how I fixed the mail problem with AOL and EarthLink.
- RR
I should put something clever here. Maybe someday.
SMTP doesn't HAVE to operate on port 25. If you mapped it to a high port range, say over 10000, it might not be filtered.
Half of the problems with destination mail domains not allowing SMTP to relay is that originating mail servers such as yours do not have AT LEAST an A Record registered in DNS.
Most mail servers today will not allow relay or send transmission if the destination mail server is not able to find an A/MX record on the originating mail server.
Also, SMTP is a protocol not an e-mail server like Sendmail/Exchange.
Dolemite
_____________________
Save the World! Use a Quote!
You are assuming that the domains are the same. If a home user has their own domain they may have legitimate need/desire to seperate their domain's email from their ISP's domain. This does not constitute incorrect configuration.
All you have to do is turn off relaying.
Earthlink just started, but here is the funny thing... I can't send to their mail server. To an address on their mail server.. from a customer IP address!
How lame is that?!? And time warner has never (as far as I can remember) let earthlink cable users use their local smtp server.
I use Fetchmail's ODMR support to pull mail into my Postfix server, and it works very well (and avoids the problems that POP3 has).
I can heartily recommend Gradwell in the UK.
- Brian.
Try the virtual hosting offered by Vserver.de. They have a virtual RedHat 7.3 system for 9.99 EURO per month. With the current exchange rate it works out to be a really good deal in US Dollars. For that you have a complete Linux box and can setup email services however you like it.
This is pretty much the problem that forced me to set up my first colo box, and wanting to save other folks the effort resulted in domainMX.net. I don't do ODMR, but I find that alternate port SMTP to a dynamic IP works pretty well, especially if you add SMTP AUTH (for *incoming*, ie I authenticate to you and requeue if I can't) to avoid the "my IP has been reassigned" problems.
As has been pointed out, many (most?) ISPs can handle your outgoing mail regardless of what sender address you use, but I do offer outgoing as well as long as you can use a sendmail-supported SMTP AUTH mechanism.
Oh, and at least one of my boxes is physically located in the US (Washington, DC). The others are in Canada (Toronto, Ottawa, Edmonton).
- Scott
SMTPAUTH, ODMR are commonly available from most providers.
Most ISPs support this, though they do not advertise it, as such. Normally, all you have to do is change the server name, and tell it to use SMTP AUTH. For example, for EarthLink, the server is "smtpauth.earthlink.com"; works for any dialup account, so long as you include your domain name in the login.
ODMR is harder and easier; it wasn't supported by anyone for a very long time; we had the first implementation, written by Jennifer Meyers (of BUGTRAQ/Security Focus/"geek-girl" fame) as part of our "IBM Web Connections" service (IBM Global Small Business division, formerly Whistle Communications). Sad to say, though we beat everyone by about 3 years, IBM Web Connections and the InterJet are no more. 8-(.
These days, everyone and their dog supports it, and you can usually get it very cheaply; a Yahoo or Google search for "ODMR" and "mail" will give you about 2,600 and 3,300 hits, respectvely, with the Yahoo results skewed to service providers instead of source code.
-- Terry
I was their customer: The servers are serveral times a month not reachable at all (sometimes for days) because of internal network problems. This disastrous situation did not change within the last 6 Months. Worst thing of all: They earn money with that because they offer no free support, only a pay-line for EUR 1,86 per Min.
The company I work for gives customers the ability to block out SPAM or not and it has several levels in between. But as far as your particular problem, I think you will find it more and more difficult to run a mail server unchecked because of the recipricol damage that could be done to the host providing you the option. You will eventually have to pay for your own bandwidth to get the most freedom.
Right now I'm stuck with Cox cable because DSL is not available in my neighborhood. If and when DSL becomes available, I'm going to go with speakeasy.net . They have a "sysadmin" package for around $60 per month that explicitly allows servers and gives you 2 static IPs. Go to their website and click on the sitemap and check out the home packages. I hope this helps.