Hello!
What's about the following vulnerability described at SecurityFocus?
http://online.securityfocus.com/bid/4908
with greetings from Germany
Jörg Backschues
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
On Wed, 17 Jul 2002 05:34:13 +0200
Joerg Backschues [EMAIL PROTECTED] wrote:
#Hello!
#
#What's about the following vulnerability described at SecurityFocus?
#
#http://online.securityfocus.com/bid/4908
#
#
From the solution link (http://online.securityfocus.com/bid/4908/solution/):
This
Jesse Keating writes:
On Wed, 17 Jul 2002 05:34:13 +0200
Joerg Backschues [EMAIL PROTECTED] wrote:
#Hello!
#
#What's about the following vulnerability described at SecurityFocus?
#
#http://online.securityfocus.com/bid/4908
#
#
From the solution link
john slee writes:
hi,
i've got it all going nicely now with pgsql auth, on debian's testing
tree, using the debian packages. wasn't hard at all. in the interests
of security i've made imapd et al. listen on on 127.0.0.1, that's easy
enough. apparently not so for authdaemon...
any
mrsam This is mostly for developers of custom authentication modules. Some of
mrsam the stock authentication modules in Courier-IMAP are also capable of
mrsam setting MAILDIR: authldap, authmysql, authpgsql, and authuserdb. That is,
mrsam when using LDAP, MySQL, Postgres, or userdb
I have maildirs stored in /var/spool/mail (ex: /var/spool/mail/pippo/
for user pippo)
How can I configure courier-imap to look in the correct path instead of
home directories?
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek
I have maildirs stored in /var/spool/mail (ex: /var/spool/mail/pippo/
for user pippo)
How can I configure courier-imap to look in the correct path instead
of home directories?
I miss to say I need to use the PAM authentication module.
Hi.
I got these into my mysql log when users log in using courier-imap (one line
for each login):
020717 13:43:57 Aborted connection 1099021 to db: 'vpopmail' user: 'sqladmin'
host: `localhost' (Got an error reading communication packets)
I use vpopmail to authenticate and authvchkpw as an
Hello,
i've just installed courier-imap.
first i tried if it's work correctly i tested it from sylpheed-claws setting new
account with IMAP.
ok, it's work pretty good:
My logs shows:
Jul 17 11:52:54 wind imapd: Connection, ip=[:::MY_IP]
Jul 17 11:52:54 wind imapd: LOGIN, user=pck,
Crazy... did anyone else get this mail message as an enclosure with a
generated CORRUPTED MESSAGE text as the actual email?
I'm trying to figure out if it was my mail server that did this, or the
list-serv mail server, or my email client. I've never before seen a
message like this, so... I am
Marco Polci writes:
I have maildirs stored in /var/spool/mail (ex: /var/spool/mail/pippo/ for
user pippo)
How can I configure courier-imap to look in the correct path instead of
home directories?
I miss to say I need to use the PAM authentication module.
You can't.
--
Sam
But I want to authenticate users, when they send
mail through my SMTP. I don't want to have open-relaying or set it per-IP.
Why it says '535
Authentication required' when I have enabled authenticated smtp connection in my
mail client ?
Thanks.
Karel
- Original Message -
Karel Jícha writes:
But I want to authenticate users, when they send mail through my SMTP. I don't want
to have open-relaying or set it per-IP.
Why it says '535 Authentication required' when I have enabled authenticated smtp
connection in my mail client ?
Because you did not read the
Your mail server did it. I got the same message with an identification
string for my mail server at the top. I think everyone on the list who has
a courier mail server (which is probably just about everyone) will have
gotten the same thing.
Anyone know if there is a way to turn this off and
Hi courier-users,
i use a courier-imap to pick up my mails from a postfix server. (Please
don't hit my:-)). One of my users wants to use pop3 with eudora. I use
pop3-ssl of course. But the user can only pickup 3 to 7 mails, after that
the connections freez and after 1 minute or 2 eudora
Hi all:
I use qmail ldap in woody (Debian) and the system goes well, smtp and
POP3.
I need to install courier imap and I configure the authdaemonrc with
authldap module. And in authldaprc file, I configure my ldap settings.
When I try to login my email account, the system informs me login
On Wed, Jul 17, 2002 at 05:34:13AM +0200, Joerg Backschues wrote:
Hello!
What's about the following vulnerability described at SecurityFocus?
http://online.securityfocus.com/bid/4908
this was acknowledged and patched by Sam a while ago..
--
/* Security is a work in progress - dreamwvr
You
have misunderstood something.
AUTH_REQUIRED means that *all* mail passing through the
server must be authenticated. Even stuff people on the outside internet send to
your users. In general, this will stop outside people from sending you emails.
AUTH_REQUIRED should only be used for
Bowie Bailey writes:
Your mail server did it. I got the same message with an identification
string for my mail server at the top. I think everyone on the list who
has
a courier mail server (which is probably just about everyone) will have
gotten the same thing.
Incorrect. Only those who
Sho' 'nuff. Thanks!
Chris
--
Chris [EMAIL PROTECTED]
Junior Birdman(TM) in training
- Original Message -
From: Sam Varshavchik [EMAIL PROTECTED]
To: courier-users [EMAIL PROTECTED]
Sent: Tuesday, July 16, 2002 11:51 PM
Subject: [courier-users] Re: Can't compile 0.39.1.20020715
I've gotten ESMTP working with those few clients who have an actual email
client that does authentication. However the logs ALWAYS record this
BEFORE it finally accepts the outgoing email from an actual user:
Jul 17 09:56:34 yellowboi courieresmtpd:
error,relay=:::XXX.XXX.XXX.XXX,msg=535
Title: Allow relay from any IP if authenticated
Anyone know how I can allow courier to relay mail from any IP address as long as the client authenticates successfully? I have tried many configurations to no avail!
etc/esmtpd - AUTH_REQUIRED = 0
etc/smtpaccess - 192.168.24.220
On Wed, 17 Jul 2002 15:02:37 -0400
Michael Bernardo [EMAIL PROTECTED] wrote:
#
#Anyone know how I can allow courier to relay mail from any IP address as
#long as the client authenticates successfully? I have tried many
#configurations to no avail!
It does this by default.
--
Jesse Keating
Jesse Keating wrote:
It does this by default.
Are you sure it does? I've seen it claim it does in the docs and here on
the list many times... but when I did the run-of-the-mill install of
'everything'... one key thing was left out which was the cause of most my
grief for user trying to auth
On Tue, Jul 16, 2002 at 05:04:56PM -0400, Sam Varshavchik wrote:
Ben Rosengart writes:
The destination directory can currently be set at compile time.
I am proposing making this configurable at run-time too. What is
the down-side? Who could possibly be harmed by making the software
On Wed, 17 Jul 2002 13:12:11 -0700
Randall Shaw [EMAIL PROTECTED] wrote:
#
#Are you sure it does? I've seen it claim it does in the docs and here on
#the list many times... but when I did the run-of-the-mill install of
#'everything'... one key thing was left out which was the cause of most my
On Wed, 2002-07-17 at 13:16, Ben Rosengart wrote:
Simple: we generate a userdb on host A, in /export/foo. We read
it on host B, in /foo. Please do not suggest that we maintain two
builds of courier-imap. I don't think you would appreciate it if
someone treated you as if your time had no
I get 2 errors from the esmtp daemon when I connect to the SMTP daemon
from a remote host
For example if I connect locally
[vmail@spiderman etc]$ telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 mail.ipcc.ca ESMTP
EHLO me
250-mail.ipcc.ca Ok.
Dear all,
I am running:
Darwin localhost 5.5 Darwin Kernel Version 5.5: Thu May 30 14:51:26 PDT
2002; root:xnu/xnu-201.42.3.obj~1/RELEASE_PPC Power Macintosh powerpc
After running:
./configure --with-waitfunc=wait3 --enable-mimetypes=/private/etc/httpd/mime.types
successfully, I run make,
I'm setting up the domain insidecinema.net. I've gone the path of
least resistance, and set most of the system up through the webadmin.
I've got a working schema for virtual users in postgres, and now I'm
seeing the following:
When I authenticate using smtp, the query that gets sent to the
Jesse Keating wrote:
I touched nothing, did an rpm install, and esmtp was working perfectly. Even
was auth'n through mysql, due to my setting of authdaemon.
Might be it... I dont use RPMs, I do the compile and install methods of
virtually everything. But I didnt do any 'withouts' or 'withs'
Randall Shaw writes:
I've gotten ESMTP working with those few clients who have an actual email
client that does authentication. However the logs ALWAYS record this
BEFORE it finally accepts the outgoing email from an actual user:
Jul 17 09:56:34 yellowboi courieresmtpd:
Adam Stern writes:
Dear all,
I am running:
Darwin localhost 5.5 Darwin Kernel Version 5.5: Thu May 30 14:51:26 PDT
2002; root:xnu/xnu-201.42.3.obj~1/RELEASE_PPC Power Macintosh powerpc
After running:
./configure --with-waitfunc=wait3
On Wed, 17 Jul 2002 14:52:19 -0700
Randall Shaw [EMAIL PROTECTED] wrote:
#Might be it... I dont use RPMs, I do the compile and install methods of
#virtually everything. But I didnt do any 'withouts' or 'withs' that would
#conflict with default settings of authorization processes. So, it may be
Juha Saarinen wrote:
Despite what you might have been told, RPM packages are not evil,
especially when you can build them yourself very easily. They cut down
the amount of troubleshooting and system admin time required a lot.
I dont think they are evil... its just the machine I chose to install
Sam Varshavchik wrote:
And did you actually read the documentation concerning configuration of
CRAM-MD5 authentication?
Yup and yuppers! Took time finding the actual docs concerning it, but I
did read it. Comprehend? may be a valid question to ask next time ;-)
hehehehe.
This is actually a
On Wed, Jul 17, 2002 at 05:55:13PM -0400, Sam Varshavchik wrote:
Ben Rosengart writes:
Simple: we generate a userdb on host A, in /export/foo. We read
it on host B, in /foo. Please do not suggest that we maintain two
builds of courier-imap. I don't think you would appreciate it if
Peter C. Norton writes:
But when I authenticate using esmtp, I see:
send(6, QSELECT mail_id, mail_crypt, mail_clear, uid, gid, home,
maildir, \'\', name FROM mail_passwd WHERE mail_id = \'mark\'\0, 115,
0) = 115
Notice that [EMAIL PROTECTED] has become just mark.
This isn't
Not evil, perhaps, but not trivial.
I'm trying to build the rpms for the latest courier release version, on a
SUSE 7.2 system, following all the instructions I have managed to track down
so far...
I need to modify the install directories by editing the spec file because,
for example, the apache
On Thu, 18 Jul 2002, Bill Michell wrote:
Not evil, perhaps, but not trivial.
I'm trying to build the rpms for the latest courier release version, on a
SUSE 7.2 system, following all the instructions I have managed to track down
so far...
I need to modify the install directories by
On Thu, 18 Jul 2002 00:21:25 +0100
Bill Michell [EMAIL PROTECTED] wrote:
#Then I start to hit problems - the faq doesn't make clear exactly how you
#use that spec file to build your RPMs - I have successfully overwritten my
#changes now several times. Should I be using the -ta option to rpm, or
Actually, both INSTALL and the .spec file itself were clear that it was
designed for RH.
My point was that the information on how to build RPMs with both custom
paths *and* custom configure options was scattered around INSTALL, the FAQ
and the mailing list, and that some of the information I
On Thu, 18 Jul 2002, Bill Michell wrote:
Actually, both INSTALL and the .spec file itself were clear that it was
designed for RH.
OK, so that would seem to be a fair warning of trouble ahead, when
building for different RPM-based systems. I've seen RPMs of Courier-IMAP
at least floating
At 11:40 AM +1200 7/18/02, Juha Saarinen wrote:
On Thu, 18 Jul 2002, Bill Michell wrote:
...snip...
I'm trying to build the rpms for the latest courier release version, on a
SUSE 7.2 system, following all the instructions I have managed to
track down
so far...
I need to modify the
On Thu, 18 Jul 2002 00:48:59 +0100
Bill Michell [EMAIL PROTECTED] wrote:
#
#Also, when it is recommended that building from RPMs should be done as
#non-root, it is strange that a file in /sbin should be referenced at all.
When does it mention /sbin? /sbin/chkconfig should only be done as a
On Wed, 17 Jul 2002 17:10:01 -0700
Patrick Beart [EMAIL PROTECTED] wrote:
# It would be really NICE if the (RH) rpm could be available
#along WITH the tarball. (hint!)
#
# Newbie that I am, I think that I trust Sam (or whomever
#creates the Red Hat RPM) more than I trust myself to
--
Bill Michell
[EMAIL PROTECTED]
-Original Message-
From: Juha Saarinen [mailto:[EMAIL PROTECTED]]
Sent: 18 July 2002 01:04
To: Bill Michell
Cc: [EMAIL PROTECTED]
Subject: RE: Building RPMs again (was RE: [courier-users] Allow relay
from any IP if authenticated)
[snip]
Please trim
On Wed, 17 Jul 2002, Patrick Beart wrote:
It would be really NICE if the (RH) rpm could be available along
WITH the tarball. (hint!)
Newbie that I am, I think that I trust Sam (or whomever creates
the Red Hat RPM) more than I trust myself to determine where the
various
On Thu, 18 Jul 2002, Bill Michell wrote:
OK. But when I do this, Outlook makes a bit of a mess of the message.
There's a fix for that too! Go to http://jump.to/oblivion (no, not being
rude here ;-)) and download the OE QuoteFix plug in. Works a treat.
Next problem; the spec file appears to
On Thu, 18 Jul 2002 01:23:38 +0100
Bill Michell [EMAIL PROTECTED] wrote:
#
#[Bill Michell] It is in the Requires(post) lines scattered liberally through
#the spec file. Actually, it seems to have been the first part of the line
#that was causing RPM to choke, not the second...
I see from your
On Thu, 18 Jul 2002, Juha Saarinen wrote:
Sam can confirm if this is correct or not, but I believe the tarball
method is the best one, as building it picks up on various authentication
and database libraries that your system has (or hasn't) installed.
Hmmm just to clarify what I wrote
Hi,
I'm upgrading to a new server (Redhat/courier)
and have installed a newer version of Courier
and i'm using pam to authenticate against NT.
I have webmail working fine (sending and receiving)
but pop3 won't authenticate. I've copied my old
/etc/pam.d/pop3, and still it disconnects me after
Hi,
Do we have any documents about courier-imap. I have just installed
the courier-imap in order to receive email through IMAP on qmail others
than using pop. However, IMAP doesn't work after running the courier-imap run-script.
First, I try to setup and IMAP account on the mail-client
sorry if my quetion look dummy. In my sqwebmail, when i try
to create new message, the from headers is always set to
user@my-computer-name (e.g : my computer name =
box.nusindo.com, then the from headers set to :
[EMAIL PROTECTED]), i want to set automatically
[EMAIL PROTECTED] (my domain =
On Wed, Jul 17, 2002 at 07:09:32PM -0400, Sam Varshavchik wrote:
Run a quick little test:
echo 'user@domain' | tr -d '\012' | makemime -c auto -e base64 -
echo 'password' | tr -d '\012' | makemime -c auto -e base64 -
This is the most convenient way to get base64-encoded strings.
55 matches
Mail list logo
