Contents Computing at Cornell Home Page Site Index Search
Contents About: Services Policies Security News Help For: Students Faculty Staff Technical Support Providers CIT Contact List
 
Computing at Cornell E-mail Services

User SMTP Authentication FAQ

 

 

What does this change actually do?

We live in a world where spam e-mail is an increasing problem. The rules used by spam filters and spam blockers are constantly being updated to catch more spam. The spammers are constantly adapting their junk mail to get past spam filters. One side-effect is that some legitimate messages get marked as spam. This is not a good thing.

One type of spam-blocking rule looks at where the mail came from. Some hosts are identified as having a history of sending spam. Any mail coming from those hosts is given a higher probability of being spam.

There is a growing movement across the Internet to help eliminate this confusion by identifying which hosts should be sending e-mail for a domain. You could think of those as systems authorized to send e-mail, such as our Postoffices. One of the requirements for authorized e-mail sending is that we need to authenticate users as they send e-mail. Currently you only authenticate as you read e-mail; with the changes CIT is making now, you will need to authenticate (by using Kerberos or a password sent over a secure connection) before you can send mail. The result is that it is harder for spammers to "spoof" an address, that is, to try to make it appear that mail is coming from a legitimate host when it's not. As more and more systems adopt these measures, it becomes harder for spammers to sneak through undetected. And that's a good thing.

 

What do I do if messages I send (from off-campus) are getting blocked?

If you try to send e-mail to somebody at Cornell and it is getting flagged as spam, try using authenticated SMTP on port 587.

Eudora Eudora instructions are a bit complicated, so we've put them on a separate Fixing Blocked Messages in Eudora page.
Thunderbird / Mozilla set the SMTP Port to 587 on the Account Settings / Outgoing Server page
Pine or Mulberry set the hostname to authusersmtp.mail.cornell.edu:587
Outlook set the SMTP Port to 587 on the Advanced tab

 

I'm getting a warning message about "encrypted connections." What do I do?

This is the result of an odd interaction of Eudora and Symantec Security. CIT has reported this to both vendors, but for now, a workaround that will not diminish your security is to change a Eudora setting. It's a bit complicated, so we've put the instructions on a separate Fixing Encryted Conneciton Alerts in Eudora page.

 

Computing at Cornell Homepage CUinfo CIT Contact List Send Us Feedback

Last modified: May 24, 2007