# Why does the unauthenticated SMTP proxy include auth\_http statement?

**URL:** <https://www.ruby-forum.com/t/why-does-the-unauthenticated-smtp-proxy-include-auth-http-statement/229655>\
**Category:** NGINX\
**Created:** [January 15, 2013, 2:57pm UTC](https://www.ruby-forum.com/t/why-does-the-unauthenticated-smtp-proxy-include-auth-http-statement/229655 "2013-01-15T14:57:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Andy\_DSArcy\_Jewell](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/ed655f/32.png) [@Andy\_DSArcy\_Jewell](https://www.ruby-forum.com/u/Andy_DSArcy_Jewell)\
**Post date:** [January 15, 2013, 2:57pm UTC](https://www.ruby-forum.com/t/why-does-the-unauthenticated-smtp-proxy-include-auth-http-statement/229655/1 "2013-01-15T14:57:33Z")

</div>

Hi all,

Can anyone throw some light on this for me please?

Looking at:

> **[Frequently Asked Questions | NGINX](https://www.nginx.com/resources/wiki/community/faq/)**
>
> Answers to the most frequently asked questions about NGINX.

It says “The example is for unauthenticated e-mail as you can see”, but  
the example clearly shows authentication:

* * *

## mail { server\_name [mail.somedomain.com](http://mail.somedomain.com); auth\_http localhost:8008/auth-smtppass.php;

So I’m confused - should this be in there? Because if so, I’m obviously  
missing something about what unauthenticated means…

-Andy

–  
Andy D’Arcy Jewell

SysMicro Limited  
Linux Support  
E: removed\_email\_address@domain.invalid  
W: [www.sysmicro.co.uk](http://www.sysmicro.co.uk)

---

<div class="post-metadata">

**Author:** ![Andy\_DSArcy\_Jewell](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/ed655f/32.png) [@Andy\_DSArcy\_Jewell](https://www.ruby-forum.com/u/Andy_DSArcy_Jewell)\
**Post date:** [January 16, 2013, 11:25am UTC](https://www.ruby-forum.com/t/why-does-the-unauthenticated-smtp-proxy-include-auth-http-statement/229655/2 "2013-01-16T11:25:28Z")

</div>

Hello!

On Tue, Jan 15, 2013 at 01:56:54PM +0000, Andy D’Arcy Jewell wrote:

> ## mail { server\_name [mail.somedomain.com](http://mail.somedomain.com); auth\_http localhost:8008/auth-smtppass.php;
> 
> So I’m confused - should this be in there? Because if so, I’m  
> obviously missing something about what unauthenticated means…

The “auth\_method none” still doesn’t mean there is no  
authentication/authorization at all, it means that it’s done  
without requiring a user to provide login/password. Auth script  
is still expected to do some form of authorization, e.g. by  
checking ip and source/destination addresses provided.

–  
Maxim D.

> **[F5 NGINX: Built for cloud-native apps. Ready for AI traffic.](https://www.f5.com/products/nginx)**
>
> Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.