Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Bron Gondwana
On Thu, Mar 26, 2009 at 04:59:07PM -0700, Florin Andrei wrote: > I want to read my email on the iPhone. To do that, I have 2 options: > 1. VPN > 2. IMAP-over-SSL > > #1 is a bit convoluted, I already run a VPN server, with OpenVPN, but > the iPhone doesn't have an OpenVPN client. Running *two* VP

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Wesley Craig
On 27 Mar 2009, at 14:06, Florin Andrei wrote: > The thing worrying me at this time is some stupid buffer overflow > in the > IMAP server code. I have no idea what's the security history of this > server, even though I've been using it for quite a while, because > it was > always in tightly con

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Zachariah Mully
On Fri, 2009-03-27 at 11:06 -0700, Florin Andrei wrote: > The thing worrying me at this time is some stupid buffer overflow in the > IMAP server code. I have no idea what's the security history of this > server, even though I've been using it for quite a while, because it was > always in tightl

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Raymond T. Sundland
Whenever you open services to the internet, you're taking a chance. I've been running Cyrus IMAP open to the Internet for years and have never had any issues, but I may have just been lucky. There are plenty of sources available for looking for the history of vulnerabilities for various softw

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Florin Andrei
Zachariah Mully wrote: > > I went to a talk by Dam Kaminsky of this past summers DNS exploit fame. > If you want to be scared sh*tless about the potential security > vulnerabilities of DNS, read up on his work. SSL does nothing. Well, we're all gonna die of something, aren't we? There are many a

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Joseph Brennan
--On Friday, March 27, 2009 9:46 -0400 Zachariah Mully wrote: >> How comfortable y'all are with exposing Cyrus IMAPd's imaps port to the >> big wild Internet? Not much point running it if you can't connect to it, is there? It's totally standard. Actually you need only plain imap with tls re

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Zachariah Mully
On Thu, 2009-03-26 at 16:59 -0700, Florin Andrei wrote: > I want to read my email on the iPhone. To do that, I have 2 options: > 1. VPN > 2. IMAP-over-SSL > > #1 is a bit convoluted, I already run a VPN server, with OpenVPN, but > the iPhone doesn't have an OpenVPN client. Running *two* VPN netwo

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-26 Thread Craig White
On Thu, 2009-03-26 at 16:59 -0700, Florin Andrei wrote: > I want to read my email on the iPhone. To do that, I have 2 options: > 1. VPN > 2. IMAP-over-SSL > > #1 is a bit convoluted, I already run a VPN server, with OpenVPN, but > the iPhone doesn't have an OpenVPN client. Running *two* VPN netwo

thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-26 Thread Florin Andrei
I want to read my email on the iPhone. To do that, I have 2 options: 1. VPN 2. IMAP-over-SSL #1 is a bit convoluted, I already run a VPN server, with OpenVPN, but the iPhone doesn't have an OpenVPN client. Running *two* VPN networks seems excessive for a small personal server - not that the mach