SMTP server without authentication?

Dave96 · July 10, 2005, 10:18am

Hi,

I’m a running a script that has to send emails for validation after signup. Unfortunetaly, there is not option to authenticate the SMTP server and I cannot use sendmail because I’m on Windows.

Is there anyway of not using authentication for a given SMTP server or any other way not requiring authentication?

Thanks

Emagine · July 10, 2005, 10:23am

set the mail server to localhost, or use CDONTS,

CDOSYS is better as there was an issue with CDONTS that can trunck urls etc.

Dave96 · July 10, 2005, 10:25am

How do you use CDONTS or CDOSYS? I have no clue.

Dave96 · July 10, 2005, 10:28am

I tried localhost, works perfectly. I usually try that option but totally forgot this time. Thanks Emagine.

Sudarshana · October 25, 2005, 6:13am

Hello Friends ,

Is there any concept of SMTP proxy server?
if yes , what is the roll of it.
and how can we find such servers in the internet.

regards
sudarshana ?(

Sudarshana · October 25, 2005, 6:16am

Hello Friends ,

I want to send mail using one anonymus SMTP server and i dont wat authentication, so is there any solution for this?
regards
sudarshana ?(

Stephen · October 25, 2005, 2:46pm

we do not provide “anonymous SMTP servers”

hafa · October 25, 2005, 5:08pm

[QUOTE=Dave96]
How do you use CDONTS or CDOSYS? I have no clue.
[/QUOTE]

Here’s a tutorial you may find helpful…

Padwah · October 25, 2005, 11:05pm

I can’t see that anyone can povide an anonymous smtp server that isn’t on every black list going, the whole idea of it just screams SPAM!

hafa · October 26, 2005, 2:01am

On Jodohost servers, CDOSYS and CDONTS must both use a valid email address on the domain in the “from” variable. This effectively authenticates the source of the message…

Note The “reply-to” variable allows for appropriate response mail when messages are sent from a form…

christina · April 2, 2006, 2:24pm

Here is a web based email script if anyone needs it. It performs basic validation and smtp authentication. I have not tested it with AOL yet but it works perfectly otherwise. I have changed the script per skypanthers comments below. This is just an example that runs “Out of the box”.

http://www.actionwebhosts.com/images/sample.gif

<%@ Language=VBScript %>
<%
dim site_url,referer
dim validPost
dim vName,vEmail
dim sName,sEmail,sSubject,sMessage
dim validReferer
dim errText
dim iMsg,iConf,Flds,MailServer,UserEmail,UserPass

'get data from form
sName = Trim(Request.Form(“Name”))
sEmail = Trim(Request.Form(“Email”))
sSubject = Trim(Request.Form(“Subject”))
sMessage = Trim(Request.Form(“Message”))

'basic email validation
function isValidEmail(byval sEmail)
’ very simple email validation function.
returnVal = false
if not isEmpty(sEmail) then
if instr(sEmail, “@”) > 0 and instr(sEmail, “.”) > 0 then
returnVal = true
end if
end if
isValidEmail = returnVal
end function

’ validate required fields
if sName = “” then vName=false else vName=true end if
if not isValidEmail(sEmail) then vEmail=false else vEmail=true end if

validPost = (vName and vEmail)

’ if form has not yet been submitted, set initial form state
if Trim(Request.Form(“isSubmitted”)) = “” then
vName=true
vEmail=true
vSubject=true
vMessage=true
end if

if validPost then ’ all fields are valid

':::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
'SCRIPT CONFIGURATION
':::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
’
site_url = “yourdomain.com” 'DOMAIN where this form will reside ! DO NOT INCLUDE http://www .
page_url = “yourform.asp” 'PAGE URL (Example: form.asp)
MailServer = “mail.yourdomain.com” 'SMTP MAIL SERVER
UserEmail = “[email protected]” 'EMAIL ADDRESS for the form results (recipient)
UserPass = “password” 'PASSWORD for the POP/SMTP UserEmail account
’
':::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
'END CONFIGURATION
':::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

'check HTTP_REFERER
referer = Request.ServerVariables(“HTTP_REFERER”)

’ not validReferer
if InStr(1,referer,site_url,0) = 0 then
validReferer = false
errText = “

E R R O R !

As a security measure, this form will not work when accessed from outside of the “” & site_url & “” domain. If you feel you have reached this page in error, please click here to try again.

”
else

’ validReferer
validReferer = true
'SEND EMAIL using CDOSYS mail object Windows 2000+

set iMsg = Server.CreateObject(“CDO.Message”)
set iConf = Server.CreateObject (“CDO.Configuration”)

'set and update fields properties
Set Flds = iConf.Fields

Flds.Update

Set iMsg.Configuration = iConf

iMsg.From = sName & " <" & sEmail & “>”
iMsg.Subject = sSubject
iMsg.To = UserEmail
'iMsg.HTMLBody = “”
iMsg.TextBody = “” & vbCrLf _
& "The following was submitted on " & FormatDateTime(Now(),1) & “:” & vbCrLf _
& vbCrLf _
& "Name: " & sName & vbCrLf _
& "Email: " & sEmail & vbCrLf _
& vbCrLf _
& "Message: " & vbCrLf _
& “------------------” & vbCrLf _
& sMessage & vbCrLf _
& vbCrLf _
& vbCrLf _

‘’ send the mail
on error goto 0
iMsg.Send

'close resources
Set iMsg = Nothing
Set iConf = Nothing
Set Flds = Nothing

end if ’ end HTTP_REFERER check

else ’ validPost
’ re-display the form with values pre-filled
’ and problem fields highlighted
end if ’ validPost

%>

Sample Form to Validate and Authenticate SMTP Email ">

Sample Form to Email Using CDOSYS

with SMTP Authentication

<% If validPost and validReferer Then ’ display success message %>

Success!

<a href=“<%Response.Write request.ServerVariables(“SCRIPT_NAME”)%>” class=“style2 style18”>[
back to sample form]

<% ElseIf validPost and validReferer=false Then %>

Email Not Sent!

<%= errText %>

<% 'End If 'not validReferer %>

<% Else %>
<% if Trim(Request.Form(“isSubmitted”)) = “yes” then 'is submiited? %>

E R R O R ! : The shaded fields below are required:

<% Else %>

Includes some basic validation and a site referrer check.

<% End If ’ is submitted? %>
<% End If 'validPost %>

Name:

" size="30"<%if not vName then%> class="errorItem"<% End If %>>

Email:

" size="30" maxlength="50"<%if not vEmail then%> class="errorItem"<% End If %>>

Subject:

" size="60">

Message:

<%Response.Write request.form("Message")%>

skypanther · April 3, 2006, 12:43pm

Get data from form
sfromName = Trim(Request.Form(“fromName”))
sfromEmail = Trim(Request.Form(“fromEmail”))
…

Might I suggest you don’t use this script. It provides ample opportunity for anyone to send mail anywhere via your script and Jodo’s servers. I could create a form on my local PC with the action set to yourserver.com/yourmailerscript.asp and pass whatever data I want. There are reports of “botnets” scanning the web for such unsecured mailers, too.

Things like the to address, smpt server, smtp auth username and password, and so forth should be coded server-side to prevent such stuffing. Also, there should be some sort of referrer check to make sure the mailer script is being called from a form on your site and not off-site as I described.

Tim

Underdog · May 31, 2006, 3:07pm

Tim,

What do you suggest?
we have a client currently having to migrate from AspEmail…casuae it does not authenticate ( on the free version)

If you wanna PM, please, feel free.

Thanks everyone.

skypanther · May 31, 2006, 3:49pm

I’m not sure what to recommend on the ASP side for a pre-built mailer. I built one for PHP but it’s limited in that you can’t include custom form fields. ( http://skypanther.com/spmailer.php )

If you’re going to do you own scripting (starting with the above code for example), you could do the following:

Check the referrer so that the form can be called only from a page on your web site
Check for and/or strip out extra HTML header information in any fields that can be provided by users.
Check the validity of any user-supplied data (email addresses are valid, no header or SQL code included, etc.)

See http://www.nyphp.org/phundamentals/email_header_injection.php for more info on header injection.

Tim