Ok, I have a dynamic IP and use dyndns.org. I setup my own mail server (let's call it X), which functions as follows:

X uses fetchmail & postfix to get mail from my ISP's mailserver

X uses MailX to send mail through ISP's server

This works fine. Now, I wanted remote access. I setup dovecot (IMAP server) which works fine and gives me IMAP access to my mail on X, including folders and all that. So I can access my mail remotely.

Now, how do I send mail remotely?

Essentially, I want my email client to connect (with authentication) to X, and send the mail through it. Since mailX is working, X should know to send the mail through the ISP server, like it does for mail that originates locally.

1) What server/protocol/configuration do I need so that I can send mail through my server (X) but limit this ability to authenticated users, so that it won't become an open relay?

Thanks,
Jason

You need to send mail from a site that is not connected to the same IP range as to your X mail server?

Meaning you cannot send mail from remote site C since the mail server is located in site A which is the only way your ISP will except mail to be sent. So if you were connected on your site A you are able to send mail to the ISP mail server. Correct?

I hope you understand that.

What I am thinking of is using ssh to setup forwarding of ports. This may be to far. Does require the then remote location to be able to do ssh and do some port modifying.

Brian

Brian,

Yes, that is correct. However... I'd rather not do that.

I was looking around and I think that postfix and Cyrus SASL is the way to go... but the configuration seems complex.

Right now, when someone sends mail to me, it goes from ISP's server -> "X" -> checked by remote user "C".

What I want is for "C" to send mail -> "X" which relays it (as if it originated on "X") -> ISP.

I hope this makes sense.

Essentially, I want to be able to send mail from any authenticated client in the world to my server "X" and then have "X" send it to the outside world via my ISP.

I see what you want. Never setup anything quite like that.

Brian