On Tue, Mar 16, 2004 at 06:42:34PM +0100, Oskar Eyb wrote:
> On Mon, Mar 15, 2004 at 05:50:49PM +0059, Claudio Jeker wrote:
> 
> > > I've searched a way for doing secure mail routing to my every day
> > > changed IP-address.
> > > [...]
> > > And - are there another ways to carry out my intention?
> 
> > A bit late but anyway...
> 
> Heisst es in der Schweiz auch "lieber sp�t als nie"? :)
> np!
> 
> > I removed the TLS client cert stuff because it was a mess and caused
> > troubles but I don't remeber what it was acctually.
> > 
> > Why don't you use SMTP AUTH over SSL?
> 
> As I wrote above:  because a dial-up line, which changed the IP through
> forced reconnect every day. If the DynDNS-IP represents not immediately
> the new IP or my router fails etc, mail can delivered to wrong hosts.
> 
> MTA<->MTA SMTP AUTH is not supported by qmail-ldap, too (I requestetd
> this "feature" some time ago).
> 

In the upcomming release AUTH LOGIN will be supported by qmail-remote.

> 
> However, I'll have a look at AutoTURN from djb's serialmail package.
> 
>   "AutoTURN delivery from the ISP. After the dialup computer makes an
>    SMTP connection to the ISP, it automatically receives an SMTP connection
>    back from the ISP if there is any new mail for it. This provides the
>    same power as ETRN but does not require a special client."
> 
> This, combined with TLS (of course), sounds like a good solution.
> 

Hmm. I don't think so. If I remember correctly the cert stuff implemented
by the tls patch used the DNS name to find the client cert. So in your
DynDNS setup you will suffer from the same problem.

For dynmaic IPs SMTP AUTH is almost the only solution (or pop before
smtp).

-- 
:wq Claudio

Reply via email to