Hi,

No, they would not be able to send mail via your server without some changes (unless you are running an open relay, in which case you have bigger problems). =)

The changes required would be either:

a. Modify the pop server to add the ip of the authenticating user to a pop-before-smtp database.
b. (Better option) Modify your smtp server to authenticate off the Gossamer Mail user database and only allow smtp auth.

or

c. Don't offer the service as anyone connecting to the internet is almost always given an smtp server to send outgoing mail through.

Cheers,

Alex
--
Gossamer Threads Inc.