Howdy.

The below patch allows a qpsmtpd admin to configure which authentication mechanisms s/he wants to allow over "unsecured" connections, and define what secure/unsecure connections are. The config.sample file should explain it pretty well, but for the lazy, here is a small sample config (sans comments), which should give you the basic gist of it:
  ssl
  ip 10.
  ip 192.168.
  ip 127.
  fallback CRAM-MD5

Note: This supersedes and breaks config/tls_before_auth - I don't think that config is very widespread since the last release didn't use it, but I'd be happy to refactor this patch, if other folks think it is necessary, to re-enable config/tls_before_auth, or at least die and instruct the admin to use the new format.

Attachment: auth_secure_conditions.patch
Description: Binary data

Attachment: config.sample-auth_secure_conditions
Description: Binary data


Cheers,
Brian Szymanski
[EMAIL PROTECTED]

Reply via email to