On 3/8/2011 11:51 AM, Eric Shubert wrote:
> On 03/08/2011 11:33 AM, Eric Broch wrote:
>> On 3/8/2011 10:43 AM, Eric Shubert wrote:
>>> On 03/07/2011 11:24 PM, Eric Broch wrote:
>>>> On 3/7/2011 3:09 PM, Eric Shubert wrote:
>>>>> Would someone like to test to see if QMT's implementation of SMTP/TLS
>>>>> is succeptable to this flaw?
>>>>> http://marc.info/?l=postfix-users&m=129952854117623&w=2
>>>>>
>>>>> This has been discussed on the dovecot list recently, and Timo
>>>>> reports
>>>>> that dovecot does not have this problem.
>>>>>
>>>>
>>>> Eric S,
>>>>
>>>> Here's the output. It may not look good.
>>>>
>>>> [root@poweredgeT1052 apps]# ./openssl s_client -quiet -starttls smtp
>>>> -connect localhost:25
>>>> 250 AUTH LOGIN PLAIN CRAM-MD5
>>>> 250 flushed
>>>>
>>>> Eric B.
>>>>
>>>>
>>>> ---------------------------------------------------------------------------------
>>>>
>>>>
>>>
>>> EricB and has done some further testing as well, and it appears that
>>> both spamdyke and qmail-smtpd suffer from this ailment.
>>>
>>> Is there anyone here with any C savvy? If you do and you'd like to
>>> have a stab at this, please chime in.
>>>
>>> I'm going to post this on the spamdyke list, and see what Sam has to
>>> say about it. I expect he'll be getting it fixed fairly quickly.
>>>
>> Eric S.,
>>
>> "Depends on your spamdyke configuration settings, but if it's 'stock'
>> (tls-level=smtp), then it is."
>>
>> Is the setting 'tls-level=smtp" supposed to be in
>> /etc/spamdyke/spamdyke.conf ???
>> It wasn't on my server. I added it with the same results.
>>
>> Eric B.
>
> It's in the present qtp-install-spamdyke script. You must've upgraded
> to v4.x between 8/08 and 11/09, when I added the TLS parameters to
> spamdyke's config.
>
> Which spamdyke version are you running? You really should have the
> latest (4.0.10). qtp-install-spamdyke will upgrade your existing
> version. To have it create new configuration files, remove your
> existing spamdyke binary file before running the script (and
> rename/backup your configuration directory). You'll need to do that
> with qmail stopped.
>
OK, I removed the spamdyke binary, rename the spamdyke directory, and
reinstalled spamdyke. It made no difference the error was the same.
Eric
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
