On 3/8/2011 10:43 AM, Eric Shubert wrote:
> On 03/07/2011 11:24 PM, Eric Broch wrote:
>> On 3/7/2011 3:09 PM, Eric Shubert wrote:
>>> Would someone like to test to see if QMT's implementation of SMTP/TLS
>>> is succeptable to this flaw?
>>> http://marc.info/?l=postfix-users&m=129952854117623&w=2
>>>
>>> This has been discussed on the dovecot list recently, and Timo reports
>>> that dovecot does not have this problem.
>>>
>>
>> Eric S,
>>
>> Here's the output. It may not look good.
>>
>> [root@poweredgeT1052 apps]# ./openssl s_client -quiet -starttls smtp
>> -connect localhost:25
>> 250 AUTH LOGIN PLAIN CRAM-MD5
>> 250 flushed
>>
>> Eric B.
>>
>>
>> ---------------------------------------------------------------------------------
>>
>
> EricB and has done some further testing as well, and it appears that
> both spamdyke and qmail-smtpd suffer from this ailment.
>
> Is there anyone here with any C savvy? If you do and you'd like to
> have a stab at this, please chime in.
>
> I'm going to post this on the spamdyke list, and see what Sam has to
> say about it. I expect he'll be getting it fixed fairly quickly.
>
Eric S.,
"Depends on your spamdyke configuration settings, but if it's 'stock'
(tls-level=smtp), then it is."
Is the setting 'tls-level=smtp" supposed to be in
/etc/spamdyke/spamdyke.conf ???
It wasn't on my server. I added it with the same results.
Eric B.
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
