How about a really short time-out?  Automated POP3 clients 
waste no time typing at the prompt --  Mark could analyze the
delay his MUAs have between connection and sending auth commands;
and patch pop3d accordingly.  Or he could patch pop3 to  require
(not just accept) encrypted authentications, maybe in addition to
the timing thing.






Paul Farber wrote:
> 
> I think the original poster is just 'scared' because the POP3 protocol
> uses cleartext command (telnet, perl script, python) could connect up and
> get mail.
> 
> Thinking that telneting to 110 and giving the same commands at a console
> is somehow 'hacking' a system.
> 
> It will blow thier mind when they telnet to port 25 and can actually SEND
> mail!
> 
> Paul Farber
> Farber Technology
> [EMAIL PROTECTED]
> Ph  570-628-5303
> Fax 570-628-5545
> 
> On Mon, 15 May 2000, Aaron L. Meehan wrote:
> > It's difficult to answer a nonsensical question.
> > Aaron
> > > At 05/14/2000 05:48 AM Sunday, Mark Lo wrote:
> > > >      I would like to disable telnet to port 110, but still
> > > >let my user to retrive mail via mail client at port 110??  (using
> > > >tcpserver)




-- 
                          David Nicol 816.235.1187 [EMAIL PROTECTED]
                                drawn to the speed and performance

Reply via email to