[...]
Right--there's no point in blocking port 25 if you just open up
another port to plain unauthenticated SMTP.
Agreed.
On the other hand, if you implement SMTP authentication, there's no
need to block port 25, and [...]
Except for the important point that the entity (putatively)
implementing SMTP AUTH or using another port usually is not the same
entity as the one (putatively) blocking port 25. In the classic
road-warrior scenario, the entity blocking port 25 is the dialup ISP
used when on the road and the entity whose SMTP server is being futzed
with is the organization who's "home" to the road-warrior.
/~\ The ASCII der Mouse
\ / Ribbon Campaign
X Against HTML
mouse(_at_)rodents(_dot_)montreal(_dot_)qc(_dot_)ca
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg