Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is the lamest approach to network security.

Now I can't reach MY email server which sits in a colo on port 25.

So, now I have to put my mail server on port 80 just so I can get out of the network.

Some of us don't trust the email servers run by the ISP.



https://www.ietf.org/rfc/rfc2476.txt

December 1998

It's hardly your ISP's fault that you are 16 years behind best practice.


It is my ISP's fault for BLOCKING THOSE PORTS.

And, since I don't really have a choice of ISP, I can't change that.

Some of us live in the real world where we wind up having to do things like put mail servers on port 80 or 25 because that port doesn't get blocked.

Thanks for playing.


https://www.ietf.org/rfc/rfc2476.txt

December 1998

It's hardly your ISP's fault that you are 16 years behind best practice.

Could you be so kind as to point to the relevant section of RFC2476?


> Port 587 is reserved for email message submission as specified in this document.


Does that actually change anything? If everyone used 587 for MSAs, then the ISPs would have to block 587 and use their own relay to prevent spam (under GP's solution). I mean, it doesn't change anything, does it?


Using 587/MSA implies[1] authentication which implies that the client is using a server that is responsible for the email sent through it.

[1]: http://en.wikipedia.org/wiki/SMTP_Authentication


You cannot enforce something just because it's 'best practice'. Why should the ISP restrict a user form running HTTP on port 25 and SMTP on port 80?


It is my ISP's fault if my ISP blocks a port and doesn't let me any way to unblock it, whatever I do with my port. My ISP's job is to forward packets, not something else.


A third of the ISP don't even support TLS/SSL on their outgoing traffic. Gmail publishes some interesting stats on that. Having to go through your ISP smtp is nearly as bad as no encryption at all.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: