From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 53FFB15838C for ; Mon, 22 Jan 2024 22:09:11 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CCA6CE2A6D; Mon, 22 Jan 2024 22:09:05 +0000 (UTC) Received: from iguana.tulip.relay.mailchannels.net (iguana.tulip.relay.mailchannels.net [23.83.218.253]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 31FE9E29B4 for ; Mon, 22 Jan 2024 22:09:04 +0000 (UTC) X-Sender-Id: thundermail|x-authsender|confabulate@kintzios.com Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 31FF2362269 for ; Mon, 22 Jan 2024 22:09:04 +0000 (UTC) ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1705961343; a=rsa-sha256; cv=none; b=TZHAXrtMW1ZEvTLz1d0xEUIXas9vQP7LXfAx+JbmP+R6Dy0Q6UUTi1E/w3wecOAEmy5CAH QmfXDpQJQ3luYrmlkFsLQtH7Adl0iuaq3E0pVV4k5lnnatcaQM0oVceYyyf1UuRcGaOmba W6ZlP8K0Vg/ybM0AWrtRRP10/+3RjhOK2CpMjVndKQQvoofKJXkss+ay6UEm39rS057GhG Vqx+ub5Vb7qanS0V8ySjqoEBiEhlqLXkL395ipMDGK5TD7nH/yzEtGVD6H2AWLoMArT8rm HOIUxGgClJjTWQtoMvSi6yo6Ye5NuLH4hfS5E6WJaxS/BnUGCgeCay1BmcMWMA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1705961343; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:dkim-signature; bh=+KF681iAqtAa57aMqPDkKfRzftkHZsnhOEGjS8362Js=; b=YD6qzwu0xNwthdezrO+oaZdeNbFhibSyK7SDae+4MX2e2RgUoKyZamGi58JMO23q/uEwND XfFKVjRq0PZOWLzwnsOp4rJFIMDAEA7HbitR1gKfpT8Yy57cvf3recnBsSG7MMMFcdU7Y/ HrnIFK+8MuiIK0iKECnPFkM5bHOjx4g8/W9cJ1uc8h5xnr2tDk4lm0QtIPBuTSdF6ieS9e f+aXlkzAwsJ345aAvIdBDTDupy2I5IBCH1AtthoqpqliP5uEhBNUW+tS9fAp/FyCbCj4RG 4nJbNGcE8t0ZBoW0kPCPxDUY/r234/jieWdntVGrjwK/7LQQeEzgJP4YN5tffA== ARC-Authentication-Results: i=1; rspamd-76cc9994fd-9dpfj; auth=pass smtp.auth=thundermail smtp.mailfrom=confabulate@kintzios.com X-Sender-Id: thundermail|x-authsender|confabulate@kintzios.com X-MC-Relay: Neutral X-MailChannels-SenderId: thundermail|x-authsender|confabulate@kintzios.com X-MailChannels-Auth-Id: thundermail X-Hysterical-Spill: 074656877d300681_1705961343807_1493535816 X-MC-Loop-Signature: 1705961343806:2074207246 X-MC-Ingress-Time: 1705961343806 Received: from mailclean11.thundermail.uk (mailclean11.thundermail.uk [149.255.60.66]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.96.118.184 (trex/6.9.2); Mon, 22 Jan 2024 22:09:03 +0000 Received: from cloud220.unlimitedwebhosting.co.uk (cloud220.unlimitedwebhosting.co.uk [149.255.60.183]) by mailclean11.thundermail.uk (Postfix) with ESMTPS id 2499D40220 for ; Mon, 22 Jan 2024 22:08:58 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kintzios.com; s=default; t=1705961339; bh=+KF681iAqtAa57aMqPDkKfRzftkHZsnhOEGjS8362Js=; h=From:To:Subject; b=rChtgX6EALcyrewGDoLjKB3WaQr/ZYDRV1fzlIcwx9cfYia31Vv4hcJ98Hqu5ROTy 16ERs/xEq1ftT8NB937yJ6Zh19VJyt+924wd05npjEtcyVBeCxSxrbHRUqqTV1v1yc Tl67+i07eZs9pSrBbEez38ziP4miSp2sFcbFdZ3g= From: Michael To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] [SOLVED] [OT] Anyone running mutt outboung smtp on port 587? Date: Mon, 22 Jan 2024 22:08:38 +0000 Message-ID: <22161767.EfDdHjke4D@rogueboard> In-Reply-To: References: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart7622324.EvYhyI6sBW"; micalg="pgp-sha256"; protocol="application/pgp-signature" X-PPP-Message-ID: <170596133911.3898400.13997343561767027054@cloud220.unlimitedwebhosting.co.uk> X-PPP-Vhost: kintzios.com X-Rspamd-Queue-Id: 2499D40220 X-Rspamd-Server: mailclean11 X-Spamd-Result: default: False [-0.61 / 999.00]; SIGNED_PGP(-2.00)[]; SUBJECT_ENDS_QUESTION(1.00)[]; MID_RHS_NOT_FQDN(0.50)[]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; ONCE_RECEIVED(0.10)[]; MX_GOOD(-0.01)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DMARC_POLICY_ALLOW(0.00)[kintzios.com,none]; FROM_HAS_DN(0.00)[]; R_DKIM_ALLOW(0.00)[kintzios.com:s=default]; ARC_NA(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; FUZZY_BLOCKED(0.00)[rspamd.com]; DKIM_TRACE(0.00)[kintzios.com:+]; RCVD_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+,1:+,2:~]; TO_DN_NONE(0.00)[]; REPLYTO_ADDR_EQ_FROM(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MISSING_XM_UA(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[gentoo-user@lists.gentoo.org]; R_SPF_ALLOW(0.00)[+mx]; NEURAL_HAM(-0.00)[-1.000]; ASN(0.00)[asn:34931, ipnet:149.255.60.0/22, country:GB]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[confabulate@kintzios.com] X-Rspamd-Action: no action X-Archives-Salt: 8c283583-d5ca-48c6-a506-35156e10db0c X-Archives-Hash: 4d7947ee0b9758c7a640f807b225f71d --nextPart7622324.EvYhyI6sBW Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="UTF-8"; protected-headers="v1" From: Michael To: gentoo-user@lists.gentoo.org Reply-To: confabulate@kintzios.com Date: Mon, 22 Jan 2024 22:08:38 +0000 Message-ID: <22161767.EfDdHjke4D@rogueboard> In-Reply-To: MIME-Version: 1.0 On Monday, 22 January 2024 21:52:03 GMT Walter Dnes wrote: > On Mon, Jan 22, 2024 at 03:24:44PM -0500, Walter Dnes wrote > > > On Tue, Jan 09, 2024 at 02:01:34PM -0500, Walter Dnes wrote > > > > > I'll soon be switching over from cable to fibre. It's the same ISP, > > > > > > but I'll be needing to authenticate outbound email on port 587 (long > > > story). > > > > > Let's start this over again, because I was barking up the wrong > > > > tree. Rather than ASS-uming stuff, I finally asked in my ISP's support > > forum and they said... > > > > > Regarding the SMTP server, the port 587 works on any type of > > > technology we are offering. It has to be set with SSL, without > > > any authentication. > > Well, that was easy. *IN MY PARTICULAR CASE* I added 3 lines to > muttrc... > > set ssl_starttls=no > set ssl_force_tls=no > set smtp_url=smtp://smtp.ebox.ca:587 > > ...and it works, at least on cable. Some 20-25 years ago ISPs would offer email services to their customers, but they had to connect to the SMTP server from the ISP provisioned block of IP addresses. Until then SMTP port 25 was in use and username/passwd was not required - although I recall some ISPs would use a 'POP before SMTP' control mechanism to make sure only authenticated users on the ISP's POP3 server were allowed to jump on the ISP's SMTP server. The STARTTLS mechanism was standardised around the late 90s to introduce encrypted communication with the server and 'AUTH PLAIN LOGIN' for SMTP was added as an extension around that time. This was done in response to an increasing abuse of SMTP servers by miscreants to relay messages for SPAM and malware alike. If your ISP *only* offers access from their own block of IPs, do they refuse access to their SMTP server for legitimate subscribers who move around and want to send messages from a different network? Anyway, if you disable TLS encryption then your communication with the server is sent in the clear. It would be prudent to consider it as a form of public communication, rather than private. I thought email comms encryption and server authentication was ubiquitous for decades now, but obviously I am wrong! :-) --nextPart7622324.EvYhyI6sBW Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEXqhvaVh2ERicA8Ceseqq9sKVZxkFAmWu52YACgkQseqq9sKV ZxmnfBAAgOS6oV86bCAMiCN2OB6XudmIWrg3/iW23mfpUTBqj3X16U2O5ukrf2Xz B5e3C+HWolkHFHjyMDfl8Tm9Ge18po6BPhxX4zZbeQmonEr6VDA7hRzyYSWhy85A mTOI163khPfgudIkWDE/vuKflCTLogEVn0MirrrGzQEDr2jwMY+7E5w1aROoESnY pmJLL4oCJ4Bo+E+4krtGML27inLX/OoKq4Tiyl6jc5waRAGk80HBmohOqOUB1Mtw G4OV6FHJ7wP6jj7XYgS06b804RRHZyiUemkuKGbRB+1Y0SPVoiqzdyiSO/Mv+RYw BUdc2+fdsVtFvjgOo6ybHiyr8jGQR+UwAUlVNhE73P+nD99t/TeRmQrJbzKQEiSg K+CsDSpXgmm74FvwJ+lswNM53kj74Ig+yb8uRvDia7ThPhfftlIx8bmzGh9LLCjy YV+AFJdc1nWafuN8D2wUm7/to48TxgrnNy5Eg7z9DyIM6iMntSoN4MYzU6Smzney F++aGU1n38wb0C4KM+flT3X5Y90WwM0BzJYKTFNlxItd6P72wnh28PcDePa8rm7q Euw0N2p7dxgVNSbLK6+Yz5vkkVZ9HO4KSLgWiCQGstktiJ3HoTMyvxXudolEFGJj Z6uH68U/WhS2R7UT6Krc3kTQLpB+Uo42DfYZZ0Z7dolaITlzRbs= =0dqZ -----END PGP SIGNATURE----- --nextPart7622324.EvYhyI6sBW--