Groups | Blog | Home
all groups > dotnet security > june 2005 >

dotnet security : local SMTP or Not for .NET application?


Shannon Clyde
6/21/2005 2:44:02 PM
We have an existing SMTP server running GroupWise where we wish to
consolidate email delivery for users and applications.

What is the best way to send mail from within a .NET application via this
external (to the Web server) SMTP server?

SMTP + relay + auth in an IPSEC tunnel to connect to our primary SMTP mail
server (GroupWise) from the Web server looks like it would work fine, but is
it the best way?

I am aware of CDOSYS and some commercial DLLs that allow devs to send mail
from within .ASP and .NET without local SMTP service running but I am not
sure how secure this is.

Is there any OTHER way to connect to an external SMTP server securely for
mail delivery from a .NET application?

--
Shannon Clyde
Information Security Officer
Dominick Baier [DevelopMentor]
6/21/2005 2:59:57 PM
Hello Shannon,

..NET has no built in support for SMTP over TLS.

So sending to the local SMTP relay and using IPSEC for mail forwarding sounds
good to me.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

[quoted text, click to view]



AddThis Social Bookmark Button