Re: Pop mail virtual user security [LONG]

2002-12-24 Thread Tim van Erven
On Sat, 07/12/2002 06:54 +0100, Tim van Erven wrote: Inspired by a recent thread on this list I decided to set up a mailserver with pop3 access over ssl. I've written a simple perl script to add users to my popa3d config. It's available[1] if anyone thinks they have any use for it. Tim PS.

Re: Pop mail virtual user security [LONG]

2002-12-24 Thread Tim van Erven
On Sat, 07/12/2002 06:54 +0100, Tim van Erven wrote: Inspired by a recent thread on this list I decided to set up a mailserver with pop3 access over ssl. I've written a simple perl script to add users to my popa3d config. It's available[1] if anyone thinks they have any use for it. Tim PS.

Re: Pop mail virtual user security [LONG]

2002-12-08 Thread Henrique de Moraes Holschuh
On Sat, 07 Dec 2002, Tim van Erven wrote: Inspired by a recent thread on this list I decided to set up a mailserver with pop3 access over ssl. It's working now, but I'd appreciate some comments on its security. My setup is as follows: I'd suggest trying a closed spool system like Cyrus 2.1.*

Re: Pop mail virtual user security [LONG]

2002-12-08 Thread Ted Cabeen
In message [EMAIL PROTECTED], Tim van Erven writes: On Sun, Dec 08, 2002 at 12:29:09PM -0200, Henrique de Moraes Holschuh hmh@deb ian.org wrote: On Sat, 07 Dec 2002, Tim van Erven wrote: Inspired by a recent thread on this list I decided to set up a mailserver with pop3 access over ssl. It's

Re: Pop mail virtual user security [LONG]

2002-12-08 Thread Christopher W. Curtis
On 12/07/02 17:43, Tim van Erven wrote: On Sat, Dec 07, 2002 at 04:39:54PM -0500, Christopher W. Curtis [EMAIL PROTECTED] wrote: On 12/07/02 12:54, Tim van Erven wrote: 2) How are the passwordhashes in /etc/shadow generated from the salt+password? I can't use 'passwd' to update popa3d's auth

Re: Pop mail virtual user security [LONG]

2002-12-08 Thread Tim van Erven
On Sun, Dec 08, 2002 at 12:29:09PM -0200, Henrique de Moraes Holschuh [EMAIL PROTECTED] wrote: On Sat, 07 Dec 2002, Tim van Erven wrote: Inspired by a recent thread on this list I decided to set up a mailserver with pop3 access over ssl. It's working now, but I'd appreciate some comments on

Re: Pop mail virtual user security [LONG]

2002-12-08 Thread Ted Cabeen
In message [EMAIL PROTECTED], Tim van Erven writes: On Sun, Dec 08, 2002 at 12:29:09PM -0200, Henrique de Moraes Holschuh [EMAIL PROTECTED] ian.org wrote: On Sat, 07 Dec 2002, Tim van Erven wrote: Inspired by a recent thread on this list I decided to set up a mailserver with pop3 access over

Re: Pop mail virtual user security [LONG]

2002-12-08 Thread Christopher W. Curtis
On 12/07/02 17:43, Tim van Erven wrote: On Sat, Dec 07, 2002 at 04:39:54PM -0500, Christopher W. Curtis [EMAIL PROTECTED] wrote: On 12/07/02 12:54, Tim van Erven wrote: 2) How are the passwordhashes in /etc/shadow generated from the salt+password? I can't use 'passwd' to update popa3d's

Re: Pop mail virtual user security [LONG]

2002-12-08 Thread Tim van Erven
Ugh, forgot to send this to the list: On Sun, 08/12/2002 07:04 -0500, Christopher W. Curtis wrote: On 12/07/02 17:43, Tim van Erven wrote: On Sat, Dec 07, 2002 at 04:39:54PM -0500, Christopher W. Curtis [EMAIL PROTECTED] wrote: On 12/07/02 12:54, Tim van Erven wrote: 2) How are the

Pop mail virtual user security [LONG]

2002-12-07 Thread Tim van Erven
Hi all, Inspired by a recent thread on this list I decided to set up a mailserver with pop3 access over ssl. It's working now, but I'd appreciate some comments on its security. My setup is as follows: - I'm using stunnel+popa3d for pop3-ssl (/usr/sbin/stunnel -d pop3s -p

Re: Pop mail virtual user security [LONG]

2002-12-07 Thread Christopher W. Curtis
On 12/07/02 12:54, Tim van Erven wrote: [much stuff I didn't read] /etc/virtualusers just contains the names of the virtual users I want to allow. - The current permissions for the mailboxes /home/virtual/popa3d/127.0.0.1/mail/${local_part} are like: -rw-rw1 mail mail

Re: Pop mail virtual user security [LONG]

2002-12-07 Thread Tim van Erven
On Sat, Dec 07, 2002 at 04:39:54PM -0500, Christopher W. Curtis [EMAIL PROTECTED] wrote: On 12/07/02 12:54, Tim van Erven wrote: 2) How are the passwordhashes in /etc/shadow generated from the salt+password? I can't use 'passwd' to update popa3d's auth files, so I need to generate them

Pop mail virtual user security [LONG]

2002-12-07 Thread Tim van Erven
Hi all, Inspired by a recent thread on this list I decided to set up a mailserver with pop3 access over ssl. It's working now, but I'd appreciate some comments on its security. My setup is as follows: - I'm using stunnel+popa3d for pop3-ssl (/usr/sbin/stunnel -d pop3s -p

Re: Pop mail virtual user security [LONG]

2002-12-07 Thread Christopher W. Curtis
On 12/07/02 12:54, Tim van Erven wrote: [much stuff I didn't read] /etc/virtualusers just contains the names of the virtual users I want to allow. - The current permissions for the mailboxes /home/virtual/popa3d/127.0.0.1/mail/${local_part} are like: -rw-rw1 mail mail

Re: Pop mail virtual user security [LONG]

2002-12-07 Thread Tim van Erven
On Sat, Dec 07, 2002 at 04:39:54PM -0500, Christopher W. Curtis [EMAIL PROTECTED] wrote: On 12/07/02 12:54, Tim van Erven wrote: 2) How are the passwordhashes in /etc/shadow generated from the salt+password? I can't use 'passwd' to update popa3d's auth files, so I need to generate them