We have those checked already.

Hrm.  I've tested this a bit just now.  I do get a proper "554 - Please use smtp port 587" if I try to auth over port 25. This then generates a "x.x.x.x user@domain.com NOTSSL" logged in login.log. 

So technically, this is working.  I just didn't expect surge to actually verify(and thus log) a successful user/pass in this case.

-Troy

Hi Troy,

I think a combination of these will accomplish what you're looking for...

g_smtp_portauth "587"

g_smtp_portforce "TRUE"

~Matthew

On Fri, Jan 27, 2017 at 12:24 PM, Surgemail <surgemail@wcta.net> wrote:

Hello,

How can I prohibit non-secure authentication, or any authentication on smtp port 25?  My users should be using port 587 for authentication.

We're not ready for "g_ssl_require_login" yet.

-Troy