Hi,

I've been studying the possibility of using relayd to implement a
redundant SMTP server for the end-user machines in my lab (ie a server
whose clients will be MUAs, possibly remote ones needing
authentification, rather than MTAs) . However, it seems to me that
relayd lacks some features to achieve my goals:

* provide unencrypted connections on ports 25 and 587 - no problem
* provide SMTPS (port 465) crypted connections without client
certificated - no problem
* provide SMTP AUTH support for encrypted transports for clients with
no certificates - this should work over SMTPS; see below for STARTTLS.
* provide SMTPS (port 465) crypted connection with a client
certificate is used for authentification -  how can the proper from
the certificate passed to sendmail(8)?
* provide  STARTTLS support for connections on ports 25 and 587 -
probably not supported by relayd, unless a specific smtp+starttls
protocol handler is implemented. And again, need a way to pass client
certificate information to sendmail(8).

Any hints or tricks to solve the issues are welcome. I would love to
be wrong when I say that currently relayd can't provde all of the
above.

Thanks.
-- 
Matthieu Herrb

Reply via email to