Hi Adam,

You are right about the advertising...
Did see that also.. but it does make login in go wrong so to say :)

Anyways there is no option now to stop this advertising from happening, I did not think this would be needed when I patched the require auth code in..
Wrong thinking it seems now..

Should be a small change to get what you want, but it requires coding..
Will try to see if I can find some time later today..

JP
JP,

Thanks for your suggestion.

So I just tried "/bin/false", and you are right in that it causes authentication to fail on port 25. However, smtpd still advertises "250 AUTH LOGIN PLAIN CRAM-MD5" which is verified by telnetting to port 25.

This means that MUA's will still try to auth and send credentials unencrypted over the wire AFAICT. This is verified by tailing /var/log/maillog while trying to auth (I can see the connection attempts).

Setting AUTH=0 on my qmailrocks machine causes smtpd to no longer advertise auth at all, and MUA's detect this and drop the connection with an error before any credentials are sent. This is the setup I am trying to replicate with QMT: to get smtpd on port 25 to not advertise auth at all.

Any other ideas by anyone?

Adam

---------------------------------------------------------------------
    QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
    QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to