Setting up your mail client for access to smtp.srv.cs.cmu.edu from off campus:

When connecting to smtp.srv.cs.cmu.edu, only those with IP addresses that start with 128.2 or 128.237 are allowed to inject and relay mail without authenticating. To configure your mail client to be able to send mail from any IP address, follow the steps below:

There are two ways of authenticating to our SMTP servers:

• GSSAPI (Kerberos V5)
• Plaintext over TLS or SSL

First, make sure your smtp server is set to be smtp.srv.cs.cmu.edu

If you decide to use GSSAPI as your authentication method, all you need to do is make sure that you have kerberos tickets for your default principal.

Otherwise, if you decide to use plaintext over TLS, you will first need to create a .mail kerberos instance of your default principal through Jeeves. You must then tell your mail client to use plaintext as an authentication method and to use SSL/TLS when connecting*. Your userid is your default kerberos principal, and your password is the password for the .mail instance of your default principal.

* If your mail client is using SSL, the connecting port number should change to 465, otherwise, if it is using TLS, the port number should remain at 25.

Once you have done this, you should now be able to send mail from off-campus locations through our SMTP servers.