Hello blist,

Friday, May 21, 2004, 2:00:08 AM, you wrote:

b> I am installing vchkpw + SMTP AUTH + qmail.  I have installed qmail with
b> this patch:
b>        qmail-smtpd-auth-0.31 from 
b> http://members.elysium.pl/brush/qmail-smtpd-auth/

b> Here is my run tcpserver script for qmail-smtpd:

b> exec /usr/local/bin/softlimit -m 10000000 \
b> /usr/local/bin/tcpserver -v -H -R -l "$LOCAL" -x \
b> /usr/local/vpopmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" -u \
b> "$QMAILDUID" -g vchkpw 25 \
b> /usr/local/bin/fixcrio \
b> /usr/local/bin/rblsmtpd -r relays.ordb.org \
b> /var/qmail/bin/qmail-smtpd ps1.prostream.net \
b> /usr/local/vpopmail/bin/vchkpw /bin/true &

b> I cannot get any users to authenticate when sending email.  I then tried
b> taking out ps1.prostream.net after /var/qmail/bin/qmail-smtpd and it
b> lets all users authenticate.  I am running SUSE 9.0 x86-64 with vpopmail
b> 5.4.0

b> Any ideas why its not working?

b> Thanks,
b> Brooks Roy


In the OLD days, people were happy with SMTP-Auth.  I consider it LESS
security as SMTP after POP, because with SMTP-Auth, You sent Your
e-mailadress and Your password of Your mailbox over the internet.
When a man-in-the-middle catch this e-mail (or worse Your PW), he can
use it for spam, or access Your mailbox.

I suggest You use: SHUPP's version with netqmail like :

fetch http://www.qmail.org/netqmail-1.05.tar.gz
tar xzvf netqmail-1.05.tar.gz.tar
cd netqmail-1.05

# patch with Shupp's TLS and SMTP-Auth
fetch http://shupp.org/patches/netqmail-1.05-tls-smtpauth-20040207.patch
patch < ./netqmail-1.05-tls-smtpauth-20040207.patch


You can copy thoses (extension .pem) from :
freeBSD, vpopmail stuff
cd /var/qmail/control
cp /usr/local/cert/ipop3d.pem servercert.pem
ln -s servercert.pem ./clientcert.pem

Activate TLS by create a certificate, and You will be much better off
to create an encrypted connecton to Your SMTP server by the SMTP Enc
smtps           465/tcp    #smtp protocol over TLS/SSL (was ssmtp)
smtps           465/udp    #smtp protocol over TLS/SSL (was ssmtp)

Best regards,
 DEBO Jurgen
 Belgian Chocolates

                 www.guide.be * www.gids.be * www.guide.fr * www.shop.fr
         / \         sarl GUIDE (sdet)
         ---         the GUIDE, de GIDS, TELESHOP, SHOP
     __   |   __     128, rue du faubourg de Douai  
    |  /  |  \  |    FR-59000 Lille, La France
     / \  |  / \     TÚl/Fax +32 59 26.91.51 Mobile +32 479 212.841
 /|______\|/______|\ Site    http://sarl.guide.fr
 \|      /|\      |/ N░ TVA  FR-55.440.243.988    
    |\ /  |  \ /|    RC Lille 74075/2001B01478
    |__\  |  /__|    Siret 440 243 988 00027
          |          Compte BE: KREDBEBB (BIC) BE56.466-5571951-88 (IBAN
         ---         Compte FR: CMCIFR2A (BIC) FR76.1562-9027-0200-0455-1870-127 (IBAN)
         \ /         Conditions (terms): http://sarl.guide.fr/conditions.php  
www.teleshop.fr * www.teleshop.be * www.teleshop.biz * www.teleshop.info * 

Reply via email to