> Since those having @postgresql.org accounts shoudl be limited to these two
> lists, can anyone comment on a) is this a bad idea? and b) would they be
> affected because they don't use SMTP AUTH and c) why aren't you using SMTP
> AUTH? ...
>
>
Are you saying that you don't *require* smtp auth? What about TLS? IMHO
you should be requiring
SMTP+TLS for all servers and users relaying through any @postgresql.org
server.
Sincerely,
Joshua D. Drake
> Thx ...
>
>