From owner-freebsd-questions@FreeBSD.ORG  Sun Aug 12 14:57:48 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D2ADC16A46B
	for <questions@freebsd.org>; Sun, 12 Aug 2007 14:57:48 +0000 (UTC)
	(envelope-from peo@intersonic.se)
Received: from neonpark.inter-sonic.com (neonpark.inter-sonic.com
	[212.247.8.98])
	by mx1.freebsd.org (Postfix) with ESMTP id 9C7D613C4A7
	for <questions@freebsd.org>; Sun, 12 Aug 2007 14:57:48 +0000 (UTC)
	(envelope-from peo@intersonic.se)
X-Virus-Scanned: amavisd-new at inter-sonic.com
Message-ID: <46BF1C21.9040105@intersonic.se>
Date: Sun, 12 Aug 2007 16:41:37 +0200
From: Per olof Ljungmark <peo@intersonic.se>
Organization: Intersonic AB
User-Agent: Thunderbird 2.0.0.4 (X11/20070703)
MIME-Version: 1.0
To: Erik Norgaard <norgaard@locolomo.org>
References: <46BEFE79.1040108@locolomo.org>
In-Reply-To: <46BEFE79.1040108@locolomo.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: FreeBSD Questions <questions@freebsd.org>
Subject: Re: Best practice for SMTP relay with user authentication
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 12 Aug 2007 14:57:48 -0000

Erik Norgaard wrote:
> Hi:
> 
> I have my postfix authenticate users before accepting mail for non-local 
> delivery. Till now, users can connect to port 25 and 465 (smtps) use 
> STARTTLS and authenticate.
> 
> But, I stumbled upon submission port 587 which is not reserved - it 
> appeas - for a protocol but for a use?
> 
> I'd like to align my configuration with best practice. Should I just 
> move postfix to bind to port 587 or did I misunderstand that submission 
> is indeed a different protocol? Is there any best practice for which 
> protocol should be used for submission?

I'm not an authority on the subject but we use it here for 
server-to-server. Here's a link to more reading:
http://www.faqs.org/rfcs/rfc2476.html

We use port 465 for authenticated MUA-to-MTA.

Per olof