On Thu, 06 Jun 2002 22:52:45 GMT, Jay Garcia wrote in
[EMAIL PROTECTED]:">news:[EMAIL PROTECTED]: 

> http requests travel via port 80
> 
> POP3 requests travel via source port 110, makes no difference whether
> it is html formmatted or text formatted.

Let me try to explain a different way:

HTML-formatted email, which Mozilla interprets, can contain uninvited code 
and scripts.  Text email cannot.  So there are certain risks with HTML-
formatted email that text email does not have.  There are also ways to 
manage those risks.  One way is to control the mail, by using programs that 
are less susceptible to the risks.  Mozilla is not one of those, because of 
the way it interprets HTML-formatted mail.  So another way is to use a 
firewall, either hardware or software.  My software firewall is configured 
to allow Mozilla to access port 80 and my usual email program (which is 
text-based) to access port 25.  (My AV proxy filter accesses port 110 and 
then serves my email program.)  The problem with my using Mozilla for mail 
is that I do not want an HTML-enabled email program to access port 80; that 
allows for the security risks I am trying to avoid.  So my question is how 
to allow the browser to access port 80 on remote machines but bar the email 
component from accessing port 80 on remote machines.

JN


Reply via email to