Oden Eriksson wrote:
> torsdagen den 8 januari 2004 21.05 skrev Michael Bowe:
>> ----- Original Message -----
>> From: "Andrea Riela" <[EMAIL PROTECTED]>
>>> With your patch, I've already a security problem? Or removing the
>>> open_smtp_relay() calls from the preauthvchmpw.c file to 
>>> authvchkpw.c, you've fixed that?
>> Yes, with the patch, the security problem is resolved, because the 
>> relay isnt opened unless the user has successfully authenticated.
>> As you say, the open_smtp_relay() calls are moved from the pre-auth 
>> stage, to post-auth
> I tried this patch but could not login. I'm running courier-imap as 
> per "http://jonaspasche.de/courier-imap-daemontools.txt";. I will 
> investigate some more this weekend, if I find the time.

Thanks, that's the last solution. Courier with vpopmail don't work fine, and
I don't know how to patch courier, I've a problem with installation. Then
I've tried with courier and relay-ctrl [OT], but a pop3s user can open the
smtp relay even if the password is wrong. Now I don't know what I've to do.
Otherwise I'll try with your patch.

Thanks ml for all,

Reply via email to