Hi

> > I have vpopmail running with smtp-after-pop functionality
> > (--enable-roaming-users). the pop-daemon is from qmail. this works fine
> > for normal (unsecure) connection via port 110. but this doesn't work if
> > connecting via strunnel on port 995. I know, thats correct, because
> > stunnel is connecting to qmail's pop3 daemon from ip 127.0.0.1.
> >
> > Is there any setup known, that results in writing users ip-address to
> > open-smtp file so that smtp-after-pop work's even if connected via
> > stunnel ?
>
> As STunnel proxies the connection, it probably looks like a connection
> on 127.0.0.1 to the SMTP server.
>
> You might want to look at using ucspi-ssl
> (http://www.superscript.com/ucspi-ssl/intro.html) which is an
> SSL-enabled version of tcpserver.

Thanks for that tip. It works fine.

for your interest. compiling uscpi-ssl with default conf-* files, my run 
script (on openbsd4.1 system) looks as follows

#!/bin/sh
CAFILE="/var/qmail/control/pop3d.pem"
CERTFILE="/var/qmail/control/pop3d.pem"
KEYFILE="/var/qmail/control/pop3d.pem"
DHFILE="/var/qmail/control/dh1024.pem"
export CAFILE CERTFILE KEYFILE DHFILE

MAX_CON=60
VPOPMAILUID=`id -u vpopmail`
VPOPMAILGID=`id -g vpopmail`
LOCAL=`head -1 /var/qmail/control/me`
LISTEN_IP=123.123.123.123

exec  /usr/local/bin/softlimit -m 5000000 \
  sslserver -e -v -HR -l "$LOCAL" \
  -c $MAX_CON \
  -u"$VPOPMAILUID" -g"$VPOPMAILGID" "$LISTEN_IP" 995 \
  /var/qmail/bin/qmail-popup `hostname` \
  /home/vpopmail/bin/vchkpw \
  /var/qmail/bin/qmail-pop3d  Maildir 2>&1

cu Christoph

!DSPAM:473794ce32002129798806!

Reply via email to