POP3-Server recommendation

2005-06-23 Thread Christopher Taylor
. What I'm looking for is basically a drop-in replacement, i.e. a POP3-server that uses system accounts, /var/mail/user and doesn't need to be configured a lot. teapop, popa3d and mailutils-pop3d seem quite promising in this respect, what are your experiences? BTW, performance isn't too much

Re: POP3-Server recommendation

2005-06-23 Thread Jeroen van Wolffelaar
On Thu, Jun 23, 2005 at 01:20:21PM +0200, Christopher Taylor wrote: Hello List, since the upgrade to sarge, UW-pop3d won't allow Plain-text logins over a non-SSL connection anymore. I've tracked this down to a change in libc-client (which I think is sensible). You can re-enable plaintext

Re: POP3-Server recommendation

2005-06-23 Thread Thiago Ribeiro
). unfortunately, though, some of my users need this functionality, so I'll have to swich the server. What I'm looking for is basically a drop-in replacement, i.e. a POP3-server that uses system accounts, /var/mail/user and doesn't need to be configured a lot. teapop, popa3d and mailutils-pop3d seem

Re: POP3-Server recommendation

2005-06-23 Thread Christopher Taylor
Jeroen van Wolffelaar wrote: On Thu, Jun 23, 2005 at 01:20:21PM +0200, Christopher Taylor wrote: since the upgrade to sarge, UW-pop3d won't allow Plain-text logins over a non-SSL connection anymore. I've tracked this down to a change in libc-client (which I think is sensible). You can

Re: which pop3/imap secure method should I use?

2005-06-14 Thread LeVA
2005. június 14. 07:57, Radu Spineanu [EMAIL PROTECTED] - debian-security@lists.debian.org,: Ian Eure wrote: On Monday 13 June 2005 04:41 pm, LeVA wrote: I don't see why it would be helpful, unless you're trying to keep your info secret from a determined/resourceful attacker. But an

Re: which pop3/imap secure method should I use?

2005-06-14 Thread Demonen
What's this MiTM attact means? Man in The Middle is when someone between you and the remote system modifies packets on their way to the remote system or back, IIRC -- Fredrik Demonen Vold /* - Do not meddle in the affairs of dragons, for you are crunchy and good with ketchup. */

which pop3/imap secure method should I use?

2005-06-13 Thread LeVA
Hi! I've configured a courier-imap server with pop3(-ssl) and imap(-ssl) support. Now I can not decide which combination of methods is the most secure (first of all) and most usefull (lastly) for me. The courier server supports both SSL and TLS, and I can use PLAIN and CRAM-MD5 methods

Re: which pop3/imap secure method should I use?

2005-06-13 Thread Ian Eure
On Monday 13 June 2005 04:23 pm, LeVA wrote: Hi! I've configured a courier-imap server with pop3(-ssl) and imap(-ssl) support. Now I can not decide which combination of methods is the most secure (first of all) and most usefull (lastly) for me. The courier server supports both SSL and TLS

Re: which pop3/imap secure method should I use?

2005-06-13 Thread LeVA
2005. jnius 14. 01:36, Ian Eure [EMAIL PROTECTED] - debian-security@lists.debian.org,: On Monday 13 June 2005 04:23 pm, LeVA wrote: Hi! I've configured a courier-imap server with pop3(-ssl) and imap(-ssl) support. Now I can not decide which combination of methods is the most secure

Re: which pop3/imap secure method should I use?

2005-06-13 Thread Ian Eure
On Monday 13 June 2005 04:41 pm, LeVA wrote: 2005. jnius 14. 01:36, Ian Eure [EMAIL PROTECTED] PLAIN is easier to set up. IIRC, CRAM-MD5 requires a seperate password file. Shouldn't be a risk if you're only using PLAIN over TLS. I understand that with TLS or SSL the clear text passwords

Re: which pop3/imap secure method should I use?

2005-06-13 Thread Radu Spineanu
Ian Eure wrote: On Monday 13 June 2005 04:41 pm, LeVA wrote: I don't see why it would be helpful, unless you're trying to keep your info secret from a determined/resourceful attacker. But an attacker like that would probably get it anyways. I use TLS PLAIN, and encrypt/sign my messages with

pop3-ssl with virtual users using popa3d HOWTO

2003-02-25 Thread Tim van Erven
Hi all, Sorry for cross-posting, but I think this might be of interest to both lists. The debian-security folks might remember my initial mail on the subject of setting up pop3-ssl with virtual users using popa3d[1]. At the time there appeared to be some interest from people implementing

pop3-ssl with virtual users using popa3d HOWTO

2003-02-25 Thread Tim van Erven
Hi all, Sorry for cross-posting, but I think this might be of interest to both lists. The debian-security folks might remember my initial mail on the subject of setting up pop3-ssl with virtual users using popa3d[1]. At the time there appeared to be some interest from people implementing

[francois@tourde.org (François TOURDE)] Re: securing pop3

2003-02-11 Thread François TOURDE
Oops, sorry, first post in a bad list. Here's the correct one... ---BeginMessage--- Janus N. Tøndering [EMAIL PROTECTED] writes: Both /bin/false and /bin/true has been suggested. Any difference in using the two? Yes. /bin/true allow a ftp account, /bin/false no. It's an old style ftpaccess

[francois@tourde.org (François TOURDE)] Re: securing pop3

2003-02-11 Thread François TOURDE
Oops, sorry, first post in a bad list. Here's the correct one... ---BeginMessage--- Janus N. Tøndering [EMAIL PROTECTED] writes: Both /bin/false and /bin/true has been suggested. Any difference in using the two? Yes. /bin/true allow a ftp account, /bin/false no. It's an old style ftpaccess

Re: [personal] securing pop3

2003-02-10 Thread Sean Burlington
and secure mail server with good tools for you and your users... vpopmail allows your to create virtual domains and users without having to account them on your linux box... g. Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d

Re: securing pop3

2003-02-10 Thread vincenzo
On Sat, 8 Feb 2003 15:23:33 +0100 Kristof Goossens [EMAIL PROTECTED] wrote: I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach vincenzo [EMAIL PROTECTED] [2003.02.10.2156 +0100]: I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well

Re: securing pop3

2003-02-10 Thread Bernard Lheureux
On Saturday 08 February 2003 15:23, Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach Mike Dresser [EMAIL PROTECTED] [2003.02.10.2226 +0100]: That lets you in just fine unfortunately. so put /bin/true for the shell. -- Please do not CC me when replying to lists; I read them! .''`. martin f. krafft [EMAIL PROTECTED] : :' :proud Debian developer, admin,

Re: securing pop3

2003-02-10 Thread vincenzo
On Mon, 10 Feb 2003 16:26:03 -0500 (EST) Mike Dresser [EMAIL PROTECTED] wrote: That lets you in just fine unfortunately. mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser: x:~# login x login: mdresser Password: Last login: Mon Feb 10 16:23:51 2003 on pts/1 Linux x 2.4.20 #1 SMP Sun

Re: securing pop3

2003-02-10 Thread Vineet Kumar
* Bernard Lheureux ([EMAIL PROTECTED]) [030210 14:07]: On Saturday 08 February 2003 15:23, Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few

Re: securing pop3

2003-02-10 Thread Johannes Berth
* vincenzo [EMAIL PROTECTED]: You can simply add them in the /etc/passwd file without giving any shell at all, like that: leon:x:1050:100::/home/leon: /--[ man 5 passwd ]: | If this field is empty, it defaults to the value /bin/sh. \-- /bin/false would be a better solution. -- To

Re: securing pop3

2003-02-10 Thread Tim van Erven
On Mon, 10/02/2003 10:53 +0100, Bernard Lheureux wrote: On Saturday 08 February 2003 15:23, Kristof Goossens wrote: About securing POP3, IMAP or SMTP, does someone know where I could find .deb packages of stunnel ? It's in stable. You might want to recompile that package without pthread

Re: securing pop3

2003-02-10 Thread Ross Currie
Quoting vincenzo [EMAIL PROTECTED]: On Mon, 10 Feb 2003 16:26:03 -0500 (EST) Mike Dresser [EMAIL PROTECTED] wrote: That lets you in just fine unfortunately. mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser: x:~# login x login: mdresser Password: Last login: Mon Feb 10

Re: securing pop3

2003-02-10 Thread Bernard Lheureux
On Monday 10 February 2003 23:20, martin f krafft wrote: also sprach Bernard Lheureux [EMAIL PROTECTED] [2003.02.10.2253 +0100]: About securing POP3, IMAP or SMTP, does someone know where I could find .deb packages of stunnel ? it's in non-US, so include the non-US mirrors in your

Re: securing pop3

2003-02-10 Thread Jens Schuessler
* Bernard Lheureux [EMAIL PROTECTED] [10-02-03 22:53]: About securing POP3, IMAP or SMTP, does someone know where I could find .deb packages of stunnel ? ?? $ apt-cache show stunnel Package: stunnel Priority: optional Section: non-US Installed-Size: 220 Maintainer: Paolo Molaro [EMAIL

Re: securing pop3

2003-02-10 Thread Janus N.
On Tue, 2003-02-11 at 19:30, Ross Currie wrote: quite right. You'll want to put something like /bin/false in your passwd file as the user's shell. Both /bin/false and /bin/true has been suggested. Any difference in using the two? Janus -- Janus Nørgaard Tøndering email:

Re: securing pop3

2003-02-10 Thread Glen Mehn
Janus N. Tøndering wrote: On Tue, 2003-02-11 at 19:30, Ross Currie wrote: quite right. You'll want to put something like /bin/false in your passwd file as the user's shell. Both /bin/false and /bin/true has been suggested. Any difference in using the two? /bin/false returns false, while

Re: [personal] securing pop3

2003-02-10 Thread Sean Burlington
, fast and secure mail server with good tools for you and your users... vpopmail allows your to create virtual domains and users without having to account them on your linux box... g. Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d

Re: securing pop3

2003-02-10 Thread vincenzo
On Sat, 8 Feb 2003 15:23:33 +0100 Kristof Goossens [EMAIL PROTECTED] wrote: I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach vincenzo [EMAIL PROTECTED] [2003.02.10.2156 +0100]: I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well

Re: securing pop3

2003-02-10 Thread Bernard Lheureux
On Saturday 08 February 2003 15:23, Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach Mike Dresser [EMAIL PROTECTED] [2003.02.10.2226 +0100]: That lets you in just fine unfortunately. so put /bin/true for the shell. -- Please do not CC me when replying to lists; I read them! .''`. martin f. krafft [EMAIL PROTECTED] : :' :proud Debian developer, admin,

Re: securing pop3

2003-02-10 Thread vincenzo
On Mon, 10 Feb 2003 16:26:03 -0500 (EST) Mike Dresser [EMAIL PROTECTED] wrote: That lets you in just fine unfortunately. mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser: x:~# login x login: mdresser Password: Last login: Mon Feb 10 16:23:51 2003 on pts/1 Linux x 2.4.20 #1 SMP Sun

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach Bernard Lheureux [EMAIL PROTECTED] [2003.02.10.2253 +0100]: About securing POP3, IMAP or SMTP, does someone know where I could find .deb packages of stunnel ? it's in non-US, so include the non-US mirrors in your sources.list! but i suggest you use courier-pop-ssl, courier-imap

Re: securing pop3

2003-02-10 Thread Vineet Kumar
* Bernard Lheureux ([EMAIL PROTECTED]) [030210 14:07]: On Saturday 08 February 2003 15:23, Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few

Re: securing pop3

2003-02-10 Thread Johannes Berth
* vincenzo [EMAIL PROTECTED]: You can simply add them in the /etc/passwd file without giving any shell at all, like that: leon:x:1050:100::/home/leon: /--[ man 5 passwd ]: | If this field is empty, it defaults to the value /bin/sh. \-- /bin/false would be a better solution.

Re: securing pop3

2003-02-10 Thread Tim van Erven
On Mon, 10/02/2003 10:53 +0100, Bernard Lheureux wrote: On Saturday 08 February 2003 15:23, Kristof Goossens wrote: About securing POP3, IMAP or SMTP, does someone know where I could find .deb packages of stunnel ? It's in stable. You might want to recompile that package without pthread

Re: securing pop3

2003-02-10 Thread Ross Currie
Quoting vincenzo [EMAIL PROTECTED]: On Mon, 10 Feb 2003 16:26:03 -0500 (EST) Mike Dresser [EMAIL PROTECTED] wrote: That lets you in just fine unfortunately. mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser: x:~# login x login: mdresser Password: Last login: Mon Feb 10

Re: securing pop3

2003-02-10 Thread Bernard Lheureux
On Monday 10 February 2003 23:20, martin f krafft wrote: also sprach Bernard Lheureux [EMAIL PROTECTED] [2003.02.10.2253 +0100]: About securing POP3, IMAP or SMTP, does someone know where I could find .deb packages of stunnel ? it's in non-US, so include the non-US mirrors in your

Re: securing pop3

2003-02-10 Thread Jens Schuessler
* Bernard Lheureux [EMAIL PROTECTED] [10-02-03 22:53]: About securing POP3, IMAP or SMTP, does someone know where I could find .deb packages of stunnel ? ?? $ apt-cache show stunnel Package: stunnel Priority: optional Section: non-US Installed-Size: 220 Maintainer: Paolo Molaro [EMAIL

Re: securing pop3

2003-02-10 Thread Janus N.
On Tue, 2003-02-11 at 19:30, Ross Currie wrote: quite right. You'll want to put something like /bin/false in your passwd file as the user's shell. Both /bin/false and /bin/true has been suggested. Any difference in using the two? Janus -- Janus Nørgaard Tøndering email:

Re: securing pop3

2003-02-10 Thread Glen Mehn
Janus N. Tøndering wrote: On Tue, 2003-02-11 at 19:30, Ross Currie wrote: quite right. You'll want to put something like /bin/false in your passwd file as the user's shell. Both /bin/false and /bin/true has been suggested. Any difference in using the two? /bin/false returns false, while

Re: [personal] securing pop3

2003-02-09 Thread Gary MacDougall
and you've got a very flexible, fast and secure mail server with good tools for you and your users... vpopmail allows your to create virtual domains and users without having to account them on your linux box... g. Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend

Re: [personal] securing pop3

2003-02-09 Thread Gary MacDougall
and you've got a very flexible, fast and secure mail server with good tools for you and your users... vpopmail allows your to create virtual domains and users without having to account them on your linux box... g. Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I

securing pop3

2003-02-08 Thread Kristof Goossens
Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well, they can have a pop3 account, but no other access whatsoever

Re: securing pop3

2003-02-08 Thread François TOURDE
Kristof Goossens [EMAIL PROTECTED] writes: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well, they can have

securing pop3

2003-02-08 Thread Kristof Goossens
Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well, they can have a pop3 account, but no other access whatsoever

Re: securing pop3

2003-02-08 Thread tps
On Sat, Feb 08, 2003 at 03:23:33PM +0100, Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system

Re: securing pop3

2003-02-08 Thread Kuba Jakubik
Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well, they can have a pop3 account

Re: securing pop3

2003-02-08 Thread François TOURDE
Kristof Goossens [EMAIL PROTECTED] writes: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well, they can have

Re: securing pop3

2003-02-08 Thread Tim van Erven
On Sat, 08/02/2003 03:52 +0100, Kuba Jakubik wrote: Kristof Goossens wrote: /bin/false. So my question is: Is it possible to create a pop3 account without needing to modify the /etc/passwd file? You should use a pop3 server that supports virtual users, like popa3d[1]. you need the users

SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Hi I need to setup a Debian Woody server with th following: * SMTP (i like sendmail) with: + incomming authentication SECURE to send an email with this server it MUST be necessary authentication with SSL * POP3 (i like qpopper) + outgoing authentication SECURE

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Statu Nascendi
PROTECTED] Sent: Thursday, October 10, 2002 3:36 PM Subject: RE: SMTP and POP3 with ssl + login/password This is just my opinion, but I much prefer qmail to sendmail. There's something to be said for using what you're familiar with, but coming from the sendmail camp there is no doubt in my mind that we

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Hi Christian Schuerer-Waldheim!!! Google is your friend! Yes i know.. ;-) http://www.stunnel.org/patches/desc/syslog_danilche.html http://www.stunnel.org/download/stunnel/mike.daewoo.com.pl/computer/stunnel/stunnel.html

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Kaixo Giacomo Mulas!!! I need authentication + SSL (with/out stunnel/wrapper) to relay email. What about one of the many MTAs which natively support tls? Off the top of my head I remember the exim-tls and postfix-tls packages, there surely are many others. I _think_ (but did not try)

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Giacomo Mulas ([EMAIL PROTECTED]): What about one of the many MTAs which natively support tls? Not excessively difficult with any of the most-used MTAs, in any event. Some (Postfix, Qmail, Exim) require patching/extensions or a prepatched package. Some (Sendmail, Courier-MTA) do not.

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Scott Moynes
* Michael Marziani ([EMAIL PROTECTED]) wrote: There have been no security hacks to qmail for over 3 years. Sendmail certainly can't say that. Depends what your definition of security hacks is. http://www-dt.e-technik.uni-dortmund.de/~ma/qmail-bugs.html sendmail is by no means perfect, but

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Scott Moynes
* Rick Moen ([EMAIL PROTECTED]) wrote: FYI: ... Thanks, that was enlightening. -- Scott Moynes http://www.icculus.org/openbox/ Computer science is as much about computers as astronomy is about telescopes. -- Dijkstra msg07333/pgp0.pgp Description: PGP signature

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Scott Moynes ([EMAIL PROTECTED]): Thanks, that was enlightening. Yr. very welcome. I count it a major success when I can add clarity to a traditionally flame-shrouded subject. ;- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL

SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Hi I need to setup a Debian Woody server with th following: * SMTP (i like sendmail) with: + incomming authentication SECURE to send an email with this server it MUST be necessary authentication with SSL * POP3 (i like qpopper) + outgoing authentication SECURE

SV: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Magnus Wiklander
Try this. http://packages.debian.org/stable/non-us/sslwrap.html /Magnus Wiklander. -Ursprungligt meddelande- Från: Iñaki Martínez [mailto:[EMAIL PROTECTED] Skickat: den 10 oktober 2002 15:02 Till: debian-security@lists.debian.org Ämne: SMTP and POP3 with ssl + login/password Hi

RE: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Michael Marziani
This is just my opinion, but I much prefer qmail to sendmail. There's something to be said for using what you're familiar with, but coming from the sendmail camp there is no doubt in my mind that we made the right decision switching to qmail. There have been no security hacks to qmail for over 3

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Christian Schuerer-Waldheim
Hi! I need to setup a Debian Woody server with th following: * SMTP (i like sendmail) with: + incomming authentication SECURE to send an email with this server it MUST be necessary authentication with SSL * POP3 (i like qpopper) + outgoing authentication SECURE

Re: SV: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Kaixo Magnus Wiklander!!! Try this. http://packages.debian.org/stable/non-us/sslwrap.html With this a solve the SSL problem, but with SMTP i do not have authentication. This also can be done with stunnel.. I need to setup a Debian Woody server with th following: * SMTP (i

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Statu Nascendi
-security@lists.debian.org Sent: Thursday, October 10, 2002 3:36 PM Subject: RE: SMTP and POP3 with ssl + login/password This is just my opinion, but I much prefer qmail to sendmail. There's something to be said for using what you're familiar with, but coming from the sendmail camp there is no doubt

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Hi Christian Schuerer-Waldheim!!! Google is your friend! Yes i know.. ;-) http://www.stunnel.org/patches/desc/syslog_danilche.html http://www.stunnel.org/download/stunnel/mike.daewoo.com.pl/computer/stunnel/stunnel.html

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Kaixo Statu Nascendi!!! But have you been able to authenticate via SSL to qmail? i patched qmail-smtpd but i could either authenticate, or make ssl connection. never the both at the same time. I prefere Sendmail, if not qmail...

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Giacomo Mulas
On Thu, 10 Oct 2002, Iñaki Martínez wrote: I need authentication + SSL (with/out stunnel/wrapper) to relay email. What about one of the many MTAs which natively support tls? Off the top of my head I remember the exim-tls and postfix-tls packages, there surely are many others. I _think_ (but

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Kaixo Giacomo Mulas!!! I need authentication + SSL (with/out stunnel/wrapper) to relay email. What about one of the many MTAs which natively support tls? Off the top of my head I remember the exim-tls and postfix-tls packages, there surely are many others. I _think_ (but did not try) that

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Giacomo Mulas ([EMAIL PROTECTED]): What about one of the many MTAs which natively support tls? Not excessively difficult with any of the most-used MTAs, in any event. Some (Postfix, Qmail, Exim) require patching/extensions or a prepatched package. Some (Sendmail, Courier-MTA) do not.

Re: SV: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Brian Jonnes
On Thu 10 Oct 02 15:47, Iñaki Martínez wrote: Kaixo Magnus Wiklander!!! Try this. http://packages.debian.org/stable/non-us/sslwrap.html With this a solve the SSL problem, but with SMTP i do not have authentication. info exim. You'll need to mess around with lookups and lsearches.

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Scott Moynes
* Michael Marziani ([EMAIL PROTECTED]) wrote: There have been no security hacks to qmail for over 3 years. Sendmail certainly can't say that. Depends what your definition of security hacks is. http://www-dt.e-technik.uni-dortmund.de/~ma/qmail-bugs.html sendmail is by no means perfect, but

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Scott Moynes ([EMAIL PROTECTED]): * Michael Marziani ([EMAIL PROTECTED]) wrote: There have been no security hacks to qmail for over 3 years. Sendmail certainly can't say that. Depends what your definition of security hacks is.

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Scott Moynes
* Rick Moen ([EMAIL PROTECTED]) wrote: FYI: ... Thanks, that was enlightening. -- Scott Moynes http://www.icculus.org/openbox/ Computer science is as much about computers as astronomy is about telescopes. -- Dijkstra pgpEbnR0C04Yr.pgp Description: PGP signature

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Scott Moynes ([EMAIL PROTECTED]): Thanks, that was enlightening. Yr. very welcome. I count it a major success when I can add clarity to a traditionally flame-shrouded subject. ;-

problem with pop3

2002-05-15 Thread Csar Augusto Seronni Filho
Hi guys, I am having one problem with pop3, I am using ipop3d and its working fine to receive messges from my local clients(in my LAN). But when i try to get messages from external client(remote notebooks with dialup connection to Internet using normal ISP) the connection is too slow, i can't

problem with pop3

2002-05-15 Thread César Augusto Seronni Filho
Hi guys, I am having one problem with pop3, I am using ipop3d and its working fine to receive messges from my local clients(in my LAN). But when i try to get messages from external client(remote notebooks with dialup connection to Internet using normal ISP) the connection is too slow, i can't

Re: secure pop3

2001-08-04 Thread Michael Knoop
I have done this, and it is not hard. You have to connect SSH with local port forwarding on port 110. Then, set your mail client to use a pop3 server on localhost. SSH will forward the pop3 request to the connected machine and send your mail back along the same connection, as if the server

Re: secure pop3

2001-08-03 Thread Alvin Oga
hi ya list of secure pop3 methodologies http://www.Linux-Sec.net/Mail/secure_pop3.txt c ya alvin On Thu, 2 Aug 2001, GARGIULO Eduardo INGDESI wrote: Hi all. I have a smtp/pop3 server behind a firewall at work and I can login the server using ssh. The problem is that the port 110

Re: secure pop3

2001-08-02 Thread Alson van der Meulen
On Thu, Aug 02, 2001 at 10:49:53AM -0300, GARGIULO Eduardo INGDESI wrote: Hi all. I have a smtp/pop3 server behind a firewall at work and I can login the server using ssh. The problem is that the port 110 is closed for external interface, so I can't get my email messages with pop3 clients

secure pop3

2001-08-02 Thread GARGIULO Eduardo INGDESI
Hi all. I have a smtp/pop3 server behind a firewall at work and I can login the server using ssh. The problem is that the port 110 is closed for external interface, so I can't get my email messages with pop3 clients. Is there any way to tunnel pop3 over ssh? How? I'm using that with X11

Re: secure pop3

2001-08-02 Thread Alson van der Meulen
On Thu, Aug 02, 2001 at 10:49:53AM -0300, GARGIULO Eduardo INGDESI wrote: Hi all. I have a smtp/pop3 server behind a firewall at work and I can login the server using ssh. The problem is that the port 110 is closed for external interface, so I can't get my email messages with pop3 clients

Re: secure pop3

2001-08-02 Thread Michael Knoop
I have done this, and it is not hard. You have to connect SSH with local port forwarding on port 110. Then, set your mail client to use a pop3 server on localhost. SSH will forward the pop3 request to the connected machine and send your mail back along the same connection, as if the server were

Re: secure pop3

2001-08-02 Thread Vineet Kumar
* Michael Knoop ([EMAIL PROTECTED]) [010802 11:41]: I have done this, and it is not hard. You have to connect SSH with local port forwarding on port 110. Then, set your mail client to use a pop3 server on localhost. SSH will forward the pop3 request to the connected machine and send your

Re: secure pop3

2001-08-02 Thread Gabriel Rocha
,[ On Thu, Aug 02, at 12:20PM, Vineet Kumar wrote: ]-- | This is only the case if you use the -g option with ssh or have | GatewayPorts yes in your config file. The default is (thankfully) | no. Otherwise, the forwarded port is bound to the localhost interface | only. The default

Re: secure pop3

2001-08-02 Thread Alvin Oga
hi ya list of secure pop3 methodologies http://www.Linux-Sec.net/Mail/secure_pop3.txt c ya alvin On Thu, 2 Aug 2001, GARGIULO Eduardo INGDESI wrote: Hi all. I have a smtp/pop3 server behind a firewall at work and I can login the server using ssh. The problem is that the port 110

Re: pop3

2001-07-30 Thread Frédéric de Villamil
Hello, actually the most secure pop3 server we've tried at work was qpoper. The only problem is it's too slow for a massive use (hosting service) and we had to write our own one. But it's still quite good, and I'd advice you to use it fred On Sunday 29 July 2001 22:13, Moe Harley wrote

Re: pop3

2001-07-30 Thread Andrew Sione Taumoefolau
I've you are using vim use: set textwidth=72 in your .vimrc to wrap te lines to a max of 72 char. Probably better not to do it that way, unless you're okay with Vim wrapping ALL documents you edit with it at 72 characters. I've got a line in my .muttrc that goes something like this:

Re: pop3

2001-07-30 Thread Brett Parker
On Mon, Jul 30, 2001 at 06:10:29PM +1000, Andrew Sione Taumoefolau wrote: I've you are using vim use: set textwidth=72 in your .vimrc to wrap te lines to a max of 72 char. Probably better not to do it that way, unless you're okay with Vim wrapping ALL documents you edit with it at

Re: Pop3 proxy

2001-07-30 Thread Marek Habersack
** On Jul 30, Tamas TEVESZ scribbled: On Mon, 30 Jul 2001, Emmanuel Lacour wrote: Is there anyone who used some of them. What is the best from a security view (I will not have a lot of connections on it). www.balabit.hu/products/Zorp/ http://www.balabit.hu/en/products/Zorp/ - that will

Re: pop3

2001-07-30 Thread Moe Harley
Thank you everyone, I value all the comments ive been receiving on the subject. :) However when I was referring to secure, i meant more along the lines of stable. I understand the pop3 protocol and know its limitations as far as plaintext passwords are concerned, and I fully intend to take

Re: pop3

2001-07-30 Thread Stephen Hassard
PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, July 30, 2001 1:44 PM Subject: Re: pop3 On Sun, Jul 29, 2001 at 04:44:57PM -0700, Rob Hudson wrote: Hello, [cut - about secure pop3 daemon] I currently have fetchmail opening up a SSH tunnel, and get my mail via popa3d. I'll attach

Re: pop3

2001-07-30 Thread Adam Olsen
On Mon, Jul 30, 2001 at 10:44:01PM +0200, Rafal Kupka wrote: On Sun, Jul 29, 2001 at 04:44:57PM -0700, Rob Hudson wrote: Hello, [cut - about secure pop3 daemon] I currently have fetchmail opening up a SSH tunnel, and get my mail via popa3d. I'll attach relavent scripts... /home

Re: pop3

2001-07-30 Thread Jim Breton
) Indeed, I have been doing exactly that and it works great. I run Solar Designer's 'popa3d' on port 110 for those users which do not have clients supporting TLS, but those who do are encouraged to use the POP3/TLS running on port 995 which is really just an stunnel to port 110 on the same machine

Re: pop3

2001-07-30 Thread Wouter van Gils
[On 30 Jul, 2001, Andrew Sione Taumoefolau wrote in Re: pop3 ] PS. Please wrap your lines at 72-ish characters. Hmm. I've seen a lot of mutt users with un-wrapped lines. I would've expected that from a GUI mail reader like Mozilla, but not from a proper mailreader like mutt. Anyone

Re: pop3

2001-07-30 Thread Frédéric de Villamil
Hello, actually the most secure pop3 server we've tried at work was qpoper. The only problem is it's too slow for a massive use (hosting service) and we had to write our own one. But it's still quite good, and I'd advice you to use it fred On Sunday 29 July 2001 22:13, Moe Harley wrote: Thought

Re: pop3

2001-07-30 Thread Andrew Sione Taumoefolau
I've you are using vim use: set textwidth=72 in your .vimrc to wrap te lines to a max of 72 char. Probably better not to do it that way, unless you're okay with Vim wrapping ALL documents you edit with it at 72 characters. I've got a line in my .muttrc that goes something like this:

Re: pop3

2001-07-30 Thread Brett Parker
On Mon, Jul 30, 2001 at 06:10:29PM +1000, Andrew Sione Taumoefolau wrote: I've you are using vim use: set textwidth=72 in your .vimrc to wrap te lines to a max of 72 char. Probably better not to do it that way, unless you're okay with Vim wrapping ALL documents you edit with it at

  1   2   >