On 03/07/2011 11:24 PM, Eric Broch wrote:
On 3/7/2011 3:09 PM, Eric Shubert wrote:
Would someone like to test to see if QMT's implementation of SMTP/TLS
is succeptable to this flaw?
http://marc.info/?l=postfix-users&m=129952854117623&w=2
This has been discussed on the dovecot list recently, and Timo reports
that dovecot does not have this problem.
Eric S,
Here's the output. It may not look good.
[root@poweredgeT1052 apps]# ./openssl s_client -quiet -starttls smtp
-connect localhost:25
250 AUTH LOGIN PLAIN CRAM-MD5
250 flushed
Eric B.
---------------------------------------------------------------------------------
EricB and has done some further testing as well, and it appears that
both spamdyke and qmail-smtpd suffer from this ailment.
Is there anyone here with any C savvy? If you do and you'd like to have
a stab at this, please chime in.
I'm going to post this on the spamdyke list, and see what Sam has to say
about it. I expect he'll be getting it fixed fairly quickly.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
