Re: pop mail recommendations

2002-12-07 Thread Jens Grivolla
Ted Cabeen <[EMAIL PROTECTED]> writes: > If we disregarded software that has had problems in the > past, sendmail would be dead and buried by now. s/would/should I haven't looked at the code of either sendmail or qpopper myself, but all people I trust to be competent on the issue say that sendm

Re: pop mail recommendations

2002-12-07 Thread Jens Grivolla
Ted Cabeen <[EMAIL PROTECTED]> writes: > If we disregarded software that has had problems in the > past, sendmail would be dead and buried by now. s/would/should I haven't looked at the code of either sendmail or qpopper myself, but all people I trust to be competent on the issue say that sendm

Re: pop mail recommendations

2002-12-06 Thread Glen Mehn
Ted Roby wrote: On Friday, Dec 6, 2002, at 04:48 US/Pacific, Jeff AA wrote: Second the recommendation for courier. Remember that pop3 by default is insecure in that user/passwords pass in the clear over the net - DON'T make your mail users real users with shell access or you are opening a l

Re: pop mail recommendations

2002-12-06 Thread Ted Roby
On Friday, Dec 6, 2002, at 04:48 US/Pacific, Jeff AA wrote: Second the recommendation for courier. Remember that pop3 by default is insecure in that user/passwords pass in the clear over the net - DON'T make your mail users real users with shell access or you are opening a large number of doo

Re: pop mail recommendations

2002-12-06 Thread Glen Mehn
Ted Roby wrote: On Friday, Dec 6, 2002, at 04:48 US/Pacific, Jeff AA wrote: Second the recommendation for courier. Remember that pop3 by default is insecure in that user/passwords pass in the clear over the net - DON'T make your mail users real users with shell access or you are opening a la

Re: pop mail recommendations

2002-12-06 Thread Glen Mehn
rs - use pop-ssl instead. regards Jeff -Original Message- From: DEFFONTAINES Vincent [mailto:[EMAIL PROTECTED] Sent: 06 December 2002 11:29 To: debian-security@lists.debian.org Subject: RE: pop mail recommendations I personnally used courrier-pop which did good, but never did

Re: pop mail recommendations

2002-12-06 Thread Ted Roby
On Friday, Dec 6, 2002, at 04:48 US/Pacific, Jeff AA wrote: Second the recommendation for courier. Remember that pop3 by default is insecure in that user/passwords pass in the clear over the net - DON'T make your mail users real users with shell access or you are opening a large number of door

Re: pop mail recommendations

2002-12-06 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Content-Type: text/plain; charset=us-ascii In message <[EMAIL PROTECTED]>, Sven Hoexter writes: >On Fri, Dec 06, 2002 at 12:07:10PM +0100, andres wrote: >> apt-get install qpopper >> >> Ok! >> >> ;-) >*rotfl* Hope that wasn't a serious answer. >apt-

Re: pop mail recommendations

2002-12-06 Thread Glen Mehn
rs - use pop-ssl instead. regards Jeff -Original Message- From: DEFFONTAINES Vincent [mailto:[EMAIL PROTECTED]] Sent: 06 December 2002 11:29 To: [EMAIL PROTECTED] Subject: RE: pop mail recommendations I personnally used courrier-pop which did good, but never did I compare it with oth

Re: pop mail recommendations

2002-12-06 Thread Noah L. Meyerhans
On Fri, Dec 06, 2002 at 04:35:04PM +0100, Christian Storch wrote: > Look at brand new > http://packages.debian.org/unstable/mail/cyrus21-imapd.html > > ssl included! Cyrus definitely rocks, but it can't be described as lightweight in any sense of the word. It's very powerful, and would be my fir

Re: pop mail recommendations

2002-12-06 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Content-Type: text/plain; charset=us-ascii In message <[EMAIL PROTECTED]>, Sven Hoexter writes: >On Fri, Dec 06, 2002 at 12:07:10PM +0100, andres wrote: >> apt-get install qpopper >> >> Ok! >> >> ;-) >*rotfl* Hope that wasn't a serious answer. >apt-

RE: pop mail recommendations

2002-12-06 Thread Christian Storch
Look at brand new http://packages.debian.org/unstable/mail/cyrus21-imapd.html ssl included! Christian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, December 06, 2002 4:12 PM To: debian-security@lists.debian.org Subject: Re: pop mail recommendations

Re: pop mail recommendations

2002-12-06 Thread Sven Hoexter
On Fri, Dec 06, 2002 at 10:12:22AM -0500, [EMAIL PROTECTED] wrote: > In article <[EMAIL PROTECTED]> you wrote: > > > On Friday, Dec 6, 2002, at 03:18 US/Pacific, Sven Hoexter wrote: > > >> I suggest popa3d from http://www.openwall.com but I'm not sure > >> if you can use it in standalone mode. >

Re: pop mail recommendations

2002-12-06 Thread mfaurot
In article <[EMAIL PROTECTED]> you wrote: > On Friday, Dec 6, 2002, at 03:18 US/Pacific, Sven Hoexter wrote: >> I suggest popa3d from http://www.openwall.com but I'm not sure >> if you can use it in standalone mode. > I like the look of popa3d, but it does not support md5 or ssl > transport. I

Re: pop mail recommendations

2002-12-06 Thread Noah L. Meyerhans
On Fri, Dec 06, 2002 at 04:35:04PM +0100, Christian Storch wrote: > Look at brand new > http://packages.debian.org/unstable/mail/cyrus21-imapd.html > > ssl included! Cyrus definitely rocks, but it can't be described as lightweight in any sense of the word. It's very powerful, and would be my fir

RE: pop mail recommendations

2002-12-06 Thread Jeff AA
illip Hofmeister [mailto:[EMAIL PROTECTED] > Sent: 06 December 2002 13:43 > To: Jeff AA > Cc: debian-security@lists.debian.org > Subject: Re: pop mail recommendations > > > On Fri, 06 Dec 2002 at 12:48:19PM -, Jeff AA wrote: > > We have exim / courier [pop imap pops imap

RE: pop mail recommendations

2002-12-06 Thread Christian Storch
debian.org Subject: RE: pop mail recommendations Second the recommendation for courier. We have exim / courier [pop imap pops imaps] using maildir formats and controlled from mysql for virtual users accepting mail for about 20 domains. We did compare with Cyrus, but that fell down on integration with exim. ...

RE: pop mail recommendations

2002-12-06 Thread Christian Storch
Look at brand new http://packages.debian.org/unstable/mail/cyrus21-imapd.html ssl included! Christian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, December 06, 2002 4:12 PM To: [EMAIL PROTECTED] Subject: Re: pop mail recommendations ... I&#

Re: pop mail recommendations

2002-12-06 Thread Phillip Hofmeister
On Fri, 06 Dec 2002 at 12:48:19PM -, Jeff AA wrote: > We have exim / courier [pop imap pops imaps] using maildir formats > and controlled from mysql for virtual users accepting mail for about > 20 domains. How do you handle virtual user password changes with this setup? Can the users change t

Re: pop mail recommendations

2002-12-06 Thread Sven Hoexter
On Fri, Dec 06, 2002 at 10:12:22AM -0500, [EMAIL PROTECTED] wrote: > In article <[EMAIL PROTECTED]> you wrote: > > > On Friday, Dec 6, 2002, at 03:18 US/Pacific, Sven Hoexter wrote: > > >> I suggest popa3d from http://www.openwall.com but I'm not sure > >> if you can use it in standalone mode. >

Re: pop mail recommendations

2002-12-06 Thread mfaurot
In article <[EMAIL PROTECTED]> you wrote: > On Friday, Dec 6, 2002, at 03:18 US/Pacific, Sven Hoexter wrote: >> I suggest popa3d from http://www.openwall.com but I'm not sure >> if you can use it in standalone mode. > I like the look of popa3d, but it does not support md5 or ssl > transport. I

Re: pop mail recommendations

2002-12-06 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ted Roby wrote: | I have setup exim to host my domain's SMTP services. | | Would any of you care to make a recommendation? I personally like teapop. It is very fast and stable. Furthermore it supports authenticating users against postgresql or mysql

RE: pop mail recommendations

2002-12-06 Thread Jeff AA
org > Subject: RE: pop mail recommendations > > > I personnally used courrier-pop which did good, but never did > I compare it > with others. > > > > -Original Message- > > From: Ted Roby [mailto:[EMAIL PROTECTED] > > Sent: Friday 6 December 2002

RE: pop mail recommendations

2002-12-06 Thread Jeff AA
illip Hofmeister [mailto:[EMAIL PROTECTED]] > Sent: 06 December 2002 13:43 > To: Jeff AA > Cc: [EMAIL PROTECTED] > Subject: Re: pop mail recommendations > > > On Fri, 06 Dec 2002 at 12:48:19PM -, Jeff AA wrote: > > We have exim / courier [pop imap pops imaps] using maildi

RE: pop mail recommendations

2002-12-06 Thread Christian Storch
t: RE: pop mail recommendations Second the recommendation for courier. We have exim / courier [pop imap pops imaps] using maildir formats and controlled from mysql for virtual users accepting mail for about 20 domains. We did compare with Cyrus, but that fell down on integration with exim. ..

Re: pop mail recommendations

2002-12-06 Thread Michael Renzmann
Hi all. Ted Roby wrote: I suggest popa3d from http://www.openwall.com but I'm not sure if you can use it in standalone mode. How about the combination of popa3d with postfix? Does this team up well? I thought of using qpopper, but I'm willing to think that over again if qpopper has major dis

Re: pop mail recommendations

2002-12-06 Thread Sven Hoexter
On Fri, Dec 06, 2002 at 03:31:31AM -0800, Ted Roby wrote: > On Friday, Dec 6, 2002, at 03:18 US/Pacific, Sven Hoexter wrote: > >On Fri, Dec 06, 2002 at 12:07:10PM +0100, andres wrote: > >>apt-get install qpopper > >>;-) > >*rotfl* Hope that wasn't a serious answer. > >apt-cache search pop3 > > > >I

RE: pop mail recommendations

2002-12-06 Thread Craig
cucipop -Original Message- From: DEFFONTAINES Vincent [mailto:[EMAIL PROTECTED] Sent: 06 December 2002 01:29 To: debian-security@lists.debian.org Subject: RE: pop mail recommendations I personnally used courrier-pop which did good, but never did I compare it with others

Re: pop mail recommendations

2002-12-06 Thread Phillip Hofmeister
On Fri, 06 Dec 2002 at 12:48:19PM -, Jeff AA wrote: > We have exim / courier [pop imap pops imaps] using maildir formats > and controlled from mysql for virtual users accepting mail for about > 20 domains. How do you handle virtual user password changes with this setup? Can the users change t

Re: pop mail recommendations

2002-12-06 Thread Ted Roby
On Friday, Dec 6, 2002, at 03:18 US/Pacific, Sven Hoexter wrote: On Fri, Dec 06, 2002 at 12:07:10PM +0100, andres wrote: apt-get install qpopper Ok! ;-) *rotfl* Hope that wasn't a serious answer. apt-cache search pop3 I suggest popa3d from http://www.openwall.com but I'm not sure if you ca

RE: pop mail recommendations

2002-12-06 Thread DEFFONTAINES Vincent
I personnally used courrier-pop which did good, but never did I compare it with others. > -Original Message- > From: Ted Roby [mailto:[EMAIL PROTECTED] > Sent: Friday 6 December 2002 11:51 > To: debian-security@lists.debian.org > Subject: pop mail recommendations >

Re: pop mail recommendations

2002-12-06 Thread Sven Hoexter
On Fri, Dec 06, 2002 at 12:07:10PM +0100, andres wrote: > apt-get install qpopper > > Ok! > > ;-) *rotfl* Hope that wasn't a serious answer. apt-cache search pop3 I suggest popa3d from http://www.openwall.com but I'm not sure if you can use it in standalone mode. Sven > Ted Roby ha escrito: >

Re: pop mail recommendations

2002-12-06 Thread andres
apt-get install qpopper Ok! ;-) Bye Ted Roby ha escrito: > I have setup exim to host my domain's SMTP services. > > I am now looking for something to host POP3 on the same Debian potato > box. > > I am asking the security list because that is my primary interest. > I would like to find somethi

Re: pop mail recommendations

2002-12-06 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ted Roby wrote: | I have setup exim to host my domain's SMTP services. | | Would any of you care to make a recommendation? I personally like teapop. It is very fast and stable. Furthermore it supports authenticating users against postgresql or mysql t

pop mail recommendations

2002-12-06 Thread Ted Roby
I have setup exim to host my domain's SMTP services. I am now looking for something to host POP3 on the same Debian potato box. I am asking the security list because that is my primary interest. I would like to find something stable, reasonably known to be secure, perhaps specifically recomme

RE: pop mail recommendations

2002-12-06 Thread Jeff AA
gment will get you a nice list of all the users / passwords for all your pop users - use pop-ssl instead. regards Jeff > -Original Message- > From: DEFFONTAINES Vincent [mailto:[EMAIL PROTECTED]] > Sent: 06 December 2002 11:29 > To: [EMAIL PROTECTED] > Subject: RE: pop

Re: pop mail recommendations

2002-12-06 Thread Michael Renzmann
Hi all. Ted Roby wrote: I suggest popa3d from http://www.openwall.com but I'm not sure if you can use it in standalone mode. How about the combination of popa3d with postfix? Does this team up well? I thought of using qpopper, but I'm willing to think that over again if qpopper has major disa

Re: pop mail recommendations

2002-12-06 Thread Sven Hoexter
On Fri, Dec 06, 2002 at 03:31:31AM -0800, Ted Roby wrote: > On Friday, Dec 6, 2002, at 03:18 US/Pacific, Sven Hoexter wrote: > >On Fri, Dec 06, 2002 at 12:07:10PM +0100, andres wrote: > >>apt-get install qpopper > >>;-) > >*rotfl* Hope that wasn't a serious answer. > >apt-cache search pop3 > > > >I

RE: pop mail recommendations

2002-12-06 Thread Craig
cucipop -Original Message- From: DEFFONTAINES Vincent [mailto:[EMAIL PROTECTED]] Sent: 06 December 2002 01:29 To: [EMAIL PROTECTED] Subject: RE: pop mail recommendations I personnally used courrier-pop which did good, but never did I compare it with others. > -Original Mess

Re: pop mail recommendations

2002-12-06 Thread Ted Roby
On Friday, Dec 6, 2002, at 03:18 US/Pacific, Sven Hoexter wrote: On Fri, Dec 06, 2002 at 12:07:10PM +0100, andres wrote: apt-get install qpopper Ok! ;-) *rotfl* Hope that wasn't a serious answer. apt-cache search pop3 I suggest popa3d from http://www.openwall.com but I'm not sure if you can

RE: pop mail recommendations

2002-12-06 Thread DEFFONTAINES Vincent
I personnally used courrier-pop which did good, but never did I compare it with others. > -Original Message- > From: Ted Roby [mailto:[EMAIL PROTECTED]] > Sent: Friday 6 December 2002 11:51 > To: [EMAIL PROTECTED] > Subject: pop mail recommendations > > > I ha

Re: pop mail recommendations

2002-12-06 Thread Sven Hoexter
On Fri, Dec 06, 2002 at 12:07:10PM +0100, andres wrote: > apt-get install qpopper > > Ok! > > ;-) *rotfl* Hope that wasn't a serious answer. apt-cache search pop3 I suggest popa3d from http://www.openwall.com but I'm not sure if you can use it in standalone mode. Sven > Ted Roby ha escrito: >

Re: pop mail recommendations

2002-12-06 Thread andres
apt-get install qpopper Ok! ;-) Bye Ted Roby ha escrito: > I have setup exim to host my domain's SMTP services. > > I am now looking for something to host POP3 on the same Debian potato > box. > > I am asking the security list because that is my primary interest. > I would like to find somethi

pop mail recommendations

2002-12-06 Thread Ted Roby
I have setup exim to host my domain's SMTP services. I am now looking for something to host POP3 on the same Debian potato box. I am asking the security list because that is my primary interest. I would like to find something stable, reasonably known to be secure, perhaps specifically recommend