On 03/08/2011 11:33 AM, Eric Broch wrote:
On 3/8/2011 10:43 AM, Eric Shubert wrote:
On 03/07/2011 11:24 PM, Eric Broch wrote:
On 3/7/2011 3:09 PM, Eric Shubert wrote:
Would someone like to test to see if QMT's implementation of SMTP/TLS
is succeptable to this flaw?
http://marc.info/?l=postfix-users&m=129952854117623&w=2
This has been discussed on the dovecot list recently, and Timo reports
that dovecot does not have this problem.
Eric S,
Here's the output. It may not look good.
[root@poweredgeT1052 apps]# ./openssl s_client -quiet -starttls smtp
-connect localhost:25
250 AUTH LOGIN PLAIN CRAM-MD5
250 flushed
Eric B.
---------------------------------------------------------------------------------
EricB and has done some further testing as well, and it appears that
both spamdyke and qmail-smtpd suffer from this ailment.
Is there anyone here with any C savvy? If you do and you'd like to
have a stab at this, please chime in.
I'm going to post this on the spamdyke list, and see what Sam has to
say about it. I expect he'll be getting it fixed fairly quickly.
Eric S.,
"Depends on your spamdyke configuration settings, but if it's 'stock'
(tls-level=smtp), then it is."
Is the setting 'tls-level=smtp" supposed to be in
/etc/spamdyke/spamdyke.conf ???
It wasn't on my server. I added it with the same results.
Eric B.
It's in the present qtp-install-spamdyke script. You must've upgraded to
v4.x between 8/08 and 11/09, when I added the TLS parameters to
spamdyke's config.
Which spamdyke version are you running? You really should have the
latest (4.0.10). qtp-install-spamdyke will upgrade your existing
version. To have it create new configuration files, remove your existing
spamdyke binary file before running the script (and rename/backup your
configuration directory). You'll need to do that with qmail stopped.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
