Re: POP3-Server recommendation

2005-06-23 Thread Christopher Taylor
Jeroen van Wolffelaar wrote: On Thu, Jun 23, 2005 at 01:20:21PM +0200, Christopher Taylor wrote: since the upgrade to sarge, UW-pop3d won't allow Plain-text logins over a non-SSL connection anymore. I've tracked this down to a change in libc-client (which I think is sensible). You can re-enabl

Re: POP3-Server recommendation

2005-06-23 Thread Thiago Ribeiro
c-client (which I think is sensible). > > unfortunately, though, some of my users need this functionality, so I'll > have to swich the server. What I'm looking for is basically a drop-in > replacement, i.e. a POP3-server that uses system accounts, > /var/mail/ and doesn't nee

Re: POP3-Server recommendation

2005-06-23 Thread Jeroen van Wolffelaar
On Thu, Jun 23, 2005 at 01:20:21PM +0200, Christopher Taylor wrote: > Hello List, > > since the upgrade to sarge, UW-pop3d won't allow Plain-text logins over > a non-SSL connection anymore. I've tracked this down to a change in > libc-client (which I think is sensible). You can re-enable plaint

POP3-Server recommendation

2005-06-23 Thread Christopher Taylor
wich the server. What I'm looking for is basically a drop-in replacement, i.e. a POP3-server that uses system accounts, /var/mail/ and doesn't need to be configured a lot. teapop, popa3d and mailutils-pop3d seem quite promising in this respect, what are your experiences? BTW, perform

Re: which pop3/imap secure method should I use?

2005-06-14 Thread Demonen
> What's this MiTM attact means? Man in The Middle is when someone "between" you and the remote system modifies packets on their way to the remote system or back, IIRC -- Fredrik "Demonen" Vold /* - Do not meddle in the affairs of dragons, for you are crunchy and good with ketchup. */

Re: which pop3/imap secure method should I use?

2005-06-14 Thread LeVA
2005. június 14. 07:57, Radu Spineanu <[EMAIL PROTECTED]> -> debian-security@lists.debian.org,: > Ian Eure wrote: > >> On Monday 13 June 2005 04:41 pm, LeVA wrote: > >> I don't see why it would be helpful, unless you're trying to keep > > your info > > >> secret from a determined/resourceful attack

Re: which pop3/imap secure method should I use?

2005-06-13 Thread Radu Spineanu
Ian Eure wrote: >> On Monday 13 June 2005 04:41 pm, LeVA wrote: >> I don't see why it would be helpful, unless you're trying to keep your info >> secret from a determined/resourceful attacker. But an attacker like that >> would probably get it anyways. >> >> I use TLS & PLAIN, and encrypt/sign my m

Re: which pop3/imap secure method should I use?

2005-06-13 Thread Ian Eure
On Monday 13 June 2005 04:41 pm, LeVA wrote: > 2005. június 14. 01:36, > Ian Eure <[EMAIL PROTECTED]> > > > PLAIN is easier to set up. IIRC, CRAM-MD5 requires a seperate password > > file. Shouldn't be a risk if you're only using PLAIN over TLS. > > I understand that with TLS or SSL the clear text

Re: which pop3/imap secure method should I use?

2005-06-13 Thread LeVA
2005. június 14. 01:36, Ian Eure <[EMAIL PROTECTED]> -> debian-security@lists.debian.org,: > On Monday 13 June 2005 04:23 pm, LeVA wrote: > > Hi! > > > > I've configured a courier-imap server with pop3(-ssl) and imap(-ssl) > > support. Now I can not decide

Re: which pop3/imap secure method should I use?

2005-06-13 Thread Ian Eure
On Monday 13 June 2005 04:23 pm, LeVA wrote: > Hi! > > I've configured a courier-imap server with pop3(-ssl) and imap(-ssl) > support. Now I can not decide which combination of methods is the most > secure (first of all) and most usefull (lastly) for me. > > The courie

which pop3/imap secure method should I use?

2005-06-13 Thread LeVA
Hi! I've configured a courier-imap server with pop3(-ssl) and imap(-ssl) support. Now I can not decide which combination of methods is the most secure (first of all) and most usefull (lastly) for me. The courier server supports both SSL and TLS, and I can use PLAIN and CRAM-MD5 method

pop3-ssl with virtual users using popa3d HOWTO

2003-02-25 Thread Tim van Erven
Hi all, Sorry for cross-posting, but I think this might be of interest to both lists. The debian-security folks might remember my initial mail on the subject of setting up pop3-ssl with virtual users using popa3d[1]. At the time there appeared to be some interest from people implementing a

pop3-ssl with virtual users using popa3d HOWTO

2003-02-25 Thread Tim van Erven
Hi all, Sorry for cross-posting, but I think this might be of interest to both lists. The debian-security folks might remember my initial mail on the subject of setting up pop3-ssl with virtual users using popa3d[1]. At the time there appeared to be some interest from people implementing a

[francois@tourde.org (François TOURDE)] Re: securing pop3

2003-02-11 Thread François TOURDE
Oops, sorry, first post in a bad list. Here's the correct one... --- Begin Message --- "Janus N." Tøndering <[EMAIL PROTECTED]> writes: > Both /bin/false and /bin/true has been suggested. Any difference in > using the two? Yes. /bin/true allow a ftp account, /bin/false no. It's an old style ftp

[francois@tourde.org (François TOURDE)] Re: securing pop3

2003-02-11 Thread François TOURDE
Oops, sorry, first post in a bad list. Here's the correct one... --- Begin Message --- "Janus N." Tøndering <[EMAIL PROTECTED]> writes: > Both /bin/false and /bin/true has been suggested. Any difference in > using the two? Yes. /bin/true allow a ftp account, /bin/false no. It's an old style ft

Re: securing pop3

2003-02-10 Thread Glen Mehn
Janus N. Tøndering wrote: On Tue, 2003-02-11 at 19:30, Ross Currie wrote: quite right. You'll want to put something like /bin/false in your passwd file as the user's shell. Both /bin/false and /bin/true has been suggested. Any difference in using the two? /bin/false returns false, while /

Re: securing pop3

2003-02-10 Thread Janus N.
On Tue, 2003-02-11 at 19:30, Ross Currie wrote: > quite right. > You'll want to put something like /bin/false in your passwd file as the user's > shell. Both /bin/false and /bin/true has been suggested. Any difference in using the two? Janus -- Janus Nørgaard Tøndering email: janus(at)ba

Re: securing pop3

2003-02-10 Thread Glen Mehn
Janus N. Tøndering wrote: On Tue, 2003-02-11 at 19:30, Ross Currie wrote: quite right. You'll want to put something like /bin/false in your passwd file as the user's shell. Both /bin/false and /bin/true has been suggested. Any difference in using the two? /bin/false returns false, while /b

Re: securing pop3

2003-02-10 Thread Jens Schuessler
* Bernard Lheureux <[EMAIL PROTECTED]> [10-02-03 22:53]: > About securing POP3, IMAP or SMTP, does someone know where I could find .deb > packages of stunnel ? ?? $ apt-cache show stunnel Package: stunnel Priority: optional Section: non-US Installed-Size: 220 Maintainer: Paolo Mo

Re: securing pop3

2003-02-10 Thread Bernard Lheureux
On Monday 10 February 2003 23:20, martin f krafft wrote: > > also sprach Bernard Lheureux <[EMAIL PROTECTED]> [2003.02.10.2253 +0100]: > > About securing POP3, IMAP or SMTP, does someone know where I could find > > .deb packages of stunnel ? > > it's in non-U

Re: securing pop3

2003-02-10 Thread Janus N.
On Tue, 2003-02-11 at 19:30, Ross Currie wrote: > quite right. > You'll want to put something like /bin/false in your passwd file as the user's > shell. Both /bin/false and /bin/true has been suggested. Any difference in using the two? Janus -- Janus Nørgaard Tøndering email: janus(at)ba

Re: securing pop3

2003-02-10 Thread Ross Currie
Quoting vincenzo <[EMAIL PROTECTED]>: > On Mon, 10 Feb 2003 16:26:03 -0500 (EST) > Mike Dresser <[EMAIL PROTECTED]> wrote: > > > That lets you in just fine unfortunately. > > > > mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser: > > > > x:~# login > > x login: mdresser > > Password: > > Last

Re: securing pop3

2003-02-10 Thread Tim van Erven
On Mon, 10/02/2003 10:53 +0100, Bernard Lheureux wrote: > On Saturday 08 February 2003 15:23, Kristof Goossens wrote: > About securing POP3, IMAP or SMTP, does someone know where I could find .deb > packages of stunnel ? It's in stable. You might want to recompile that package w

Re: securing pop3

2003-02-10 Thread Johannes Berth
* vincenzo <[EMAIL PROTECTED]>: > You can simply add them in the /etc/passwd file without giving any shell > at all, like that: > leon:x:1050:100::/home/leon: /--[ man 5 passwd ]: | If this field is empty, it defaults to the value /bin/sh. \-- /bin/false would be a better solution.

Re: securing pop3

2003-02-10 Thread Vineet Kumar
* Bernard Lheureux ([EMAIL PROTECTED]) [030210 14:07]: > On Saturday 08 February 2003 15:23, Kristof Goossens wrote: > > > > Hello all, > > > > I need to make a pop3 account on my server. I intend to work with ipop3d to > > provide secure pop3 service. Now I want

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach Bernard Lheureux <[EMAIL PROTECTED]> [2003.02.10.2253 +0100]: > About securing POP3, IMAP or SMTP, does someone know where I could find .deb > packages of stunnel ? it's in non-US, so include the non-US mirrors in your sources.list! but i suggest you use courier

Re: securing pop3

2003-02-10 Thread vincenzo
On Mon, 10 Feb 2003 16:26:03 -0500 (EST) Mike Dresser <[EMAIL PROTECTED]> wrote: > That lets you in just fine unfortunately. > > mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser: > > x:~# login > x login: mdresser > Password: > Last login: Mon Feb 10 16:23:51 2003 on pts/1 > Linux x 2.4.20 #1

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach Mike Dresser <[EMAIL PROTECTED]> [2003.02.10.2226 +0100]: > That lets you in just fine unfortunately. so put /bin/true for the shell. -- Please do not CC me when replying to lists; I read them! .''`. martin f. krafft <[EMAIL PROTECTED]> : :' :proud Debian developer, admin

Re: securing pop3

2003-02-10 Thread Bernard Lheureux
On Saturday 08 February 2003 15:23, Kristof Goossens wrote: > > Hello all, > > I need to make a pop3 account on my server. I intend to work with ipop3d to > provide secure pop3 service. Now I want to provide this service for only > few people, and I don't want them to

Re: securing pop3

2003-02-10 Thread Mike Dresser
On Mon, 10 Feb 2003, vincenzo wrote: > You can simply add them in the /etc/passwd file without giving any shell > at all, like that: > leon:x:1050:100::/home/leon: > That lets you in just fine unfortunately. mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser: x:~# login x login: mdresser Passwo

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach vincenzo <[EMAIL PROTECTED]> [2003.02.10.2156 +0100]: > > I need to make a pop3 account on my server. I intend to work with > > ipop3d to provide secure pop3 service. Now I want to provide this > > service for only few people, and I don't want them to have

Re: securing pop3

2003-02-10 Thread Jens Schuessler
* Bernard Lheureux <[EMAIL PROTECTED]> [10-02-03 22:53]: > About securing POP3, IMAP or SMTP, does someone know where I could find .deb > packages of stunnel ? ?? $ apt-cache show stunnel Package: stunnel Priority: optional Section: non-US Installed-Size: 220 Maintainer: Paolo Mo

Re: securing pop3

2003-02-10 Thread vincenzo
On Sat, 8 Feb 2003 15:23:33 +0100 Kristof Goossens <[EMAIL PROTECTED]> wrote: > I need to make a pop3 account on my server. I intend to work with > ipop3d to provide secure pop3 service. Now I want to provide this > service for only few people, and I don't want them to have

Re: securing pop3

2003-02-10 Thread Bernard Lheureux
On Monday 10 February 2003 23:20, martin f krafft wrote: > > also sprach Bernard Lheureux <[EMAIL PROTECTED]> [2003.02.10.2253 +0100]: > > About securing POP3, IMAP or SMTP, does someone know where I could find > > .deb packages of stunnel ? > > it's in non-U

Re: securing pop3

2003-02-10 Thread Ross Currie
Quoting vincenzo <[EMAIL PROTECTED]>: > On Mon, 10 Feb 2003 16:26:03 -0500 (EST) > Mike Dresser <[EMAIL PROTECTED]> wrote: > > > That lets you in just fine unfortunately. > > > > mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser: > > > > x:~# login > > x login: mdresser > > Password: > > Last

Re: securing pop3

2003-02-10 Thread Tim van Erven
On Mon, 10/02/2003 10:53 +0100, Bernard Lheureux wrote: > On Saturday 08 February 2003 15:23, Kristof Goossens wrote: > About securing POP3, IMAP or SMTP, does someone know where I could find .deb > packages of stunnel ? It's in stable. You might want to recompile that package w

Re: securing pop3

2003-02-10 Thread Johannes Berth
* vincenzo <[EMAIL PROTECTED]>: > You can simply add them in the /etc/passwd file without giving any shell > at all, like that: > leon:x:1050:100::/home/leon: /--[ man 5 passwd ]: | If this field is empty, it defaults to the value /bin/sh. \-- /bin/false would be a better solution. -- To UNS

Re: securing pop3

2003-02-10 Thread Vineet Kumar
* Bernard Lheureux ([EMAIL PROTECTED]) [030210 14:07]: > On Saturday 08 February 2003 15:23, Kristof Goossens wrote: > > > > Hello all, > > > > I need to make a pop3 account on my server. I intend to work with ipop3d to > > provide secure pop3 service. Now I want

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach Bernard Lheureux <[EMAIL PROTECTED]> [2003.02.10.2253 +0100]: > About securing POP3, IMAP or SMTP, does someone know where I could find .deb > packages of stunnel ? it's in non-US, so include the non-US mirrors in your sources.list! but i suggest you use courier

Re: securing pop3

2003-02-10 Thread vincenzo
On Mon, 10 Feb 2003 16:26:03 -0500 (EST) Mike Dresser <[EMAIL PROTECTED]> wrote: > That lets you in just fine unfortunately. > > mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser: > > x:~# login > x login: mdresser > Password: > Last login: Mon Feb 10 16:23:51 2003 on pts/1 > Linux x 2.4.20 #1

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach Mike Dresser <[EMAIL PROTECTED]> [2003.02.10.2226 +0100]: > That lets you in just fine unfortunately. so put /bin/true for the shell. -- Please do not CC me when replying to lists; I read them! .''`. martin f. krafft <[EMAIL PROTECTED]> : :' :proud Debian developer, admin

Re: securing pop3

2003-02-10 Thread Bernard Lheureux
On Saturday 08 February 2003 15:23, Kristof Goossens wrote: > > Hello all, > > I need to make a pop3 account on my server. I intend to work with ipop3d to > provide secure pop3 service. Now I want to provide this service for only > few people, and I don't want them to

Re: securing pop3

2003-02-10 Thread Mike Dresser
On Mon, 10 Feb 2003, vincenzo wrote: > You can simply add them in the /etc/passwd file without giving any shell > at all, like that: > leon:x:1050:100::/home/leon: > That lets you in just fine unfortunately. mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser: x:~# login x login: mdresser Passwo

Re: securing pop3

2003-02-10 Thread martin f krafft
also sprach vincenzo <[EMAIL PROTECTED]> [2003.02.10.2156 +0100]: > > I need to make a pop3 account on my server. I intend to work with > > ipop3d to provide secure pop3 service. Now I want to provide this > > service for only few people, and I don't want them to have

Re: securing pop3

2003-02-10 Thread vincenzo
On Sat, 8 Feb 2003 15:23:33 +0100 Kristof Goossens <[EMAIL PROTECTED]> wrote: > I need to make a pop3 account on my server. I intend to work with > ipop3d to provide secure pop3 service. Now I want to provide this > service for only few people, and I don't want them to have

Re: [personal] securing pop3

2003-02-10 Thread Sean Burlington
very flexible, fast and secure mail server with good tools for you and your users... vpopmail allows your to create virtual domains and users without having to account them on your linux box... g. Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work

Re: [personal] securing pop3

2003-02-10 Thread Sean Burlington
flexible, fast and secure mail server with good tools for you and your users... vpopmail allows your to create virtual domains and users without having to account them on your linux box... g. Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work

Re: [personal] securing pop3

2003-02-09 Thread Gary MacDougall
n and you've got a very flexible, fast and secure mail server with good tools for you and your users... vpopmail allows your to create virtual domains and users without having to account them on your linux box... g. Kristof Goossens wrote: Hello all, I need to make a pop3 account on my

Re: [personal] securing pop3

2003-02-09 Thread Gary MacDougall
n and you've got a very flexible, fast and secure mail server with good tools for you and your users... vpopmail allows your to create virtual domains and users without having to account them on your linux box... g. Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server

Re: securing pop3

2003-02-08 Thread Tim van Erven
On Sat, 08/02/2003 03:52 +0100, Kuba Jakubik wrote: > Kristof Goossens wrote: >> /bin/false. So my question is: "Is it possible to create a pop3 account >> without >> needing to modify the /etc/passwd file?" You should use a pop3 server that supports virtual use

Re: securing pop3

2003-02-08 Thread François TOURDE
Kristof Goossens <[EMAIL PROTECTED]> writes: > Hello all, > > I need to make a pop3 account on my server. I intend to work with ipop3d to > provide secure pop3 service. Now I want to provide this service for only > few people, and I don't want them to have an account

Re: securing pop3

2003-02-08 Thread Kuba Jakubik
Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well, they can have a pop3 account, b

Re: securing pop3

2003-02-08 Thread tps
On Sat, Feb 08, 2003 at 03:23:33PM +0100, Kristof Goossens wrote: > Hello all, > > I need to make a pop3 account on my server. I intend to work with ipop3d to > provide secure pop3 service. Now I want to provide this service for only > few people, and I don't want them to ha

securing pop3

2003-02-08 Thread Kristof Goossens
Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well, they can have a pop3 account, but no other access whats

Re: securing pop3

2003-02-08 Thread Tim van Erven
On Sat, 08/02/2003 03:52 +0100, Kuba Jakubik wrote: > Kristof Goossens wrote: >> /bin/false. So my question is: "Is it possible to create a pop3 account >> without >> needing to modify the /etc/passwd file?" You should use a pop3 server that supports virtual use

Re: securing pop3

2003-02-08 Thread François TOURDE
Kristof Goossens <[EMAIL PROTECTED]> writes: > Hello all, > > I need to make a pop3 account on my server. I intend to work with ipop3d to > provide secure pop3 service. Now I want to provide this service for only > few people, and I don't want them to have an account

Re: securing pop3

2003-02-08 Thread Kuba Jakubik
Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well, they can have a pop3 account, b

securing pop3

2003-02-08 Thread Kristof Goossens
Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well, they can have a pop3 account, but no other access whats

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Scott Moynes ([EMAIL PROTECTED]): > Thanks, that was enlightening. Yr. very welcome. I count it a major success when I can add clarity to a traditionally flame-shrouded subject. ;->

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Scott Moynes
* Rick Moen ([EMAIL PROTECTED]) wrote: > FYI: > ... > Thanks, that was enlightening. -- Scott Moynes http://www.icculus.org/openbox/ "Computer science is as much about computers as astronomy is about telescopes." -- Dijkstra pgpEbnR0C04Yr.pgp Description: PGP signature

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Scott Moynes ([EMAIL PROTECTED]): > * Michael Marziani ([EMAIL PROTECTED]) wrote: >> There have been no security hacks to qmail for over 3 years. >> Sendmail certainly can't say that. > > Depends what your definition of "security hacks" is. > http://www-dt.e-technik.uni-dortmund.de/~ma/qm

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Scott Moynes
* Michael Marziani ([EMAIL PROTECTED]) wrote: > There have been no security hacks to qmail for over 3 years. > Sendmail certainly can't say that. Depends what your definition of "security hacks" is. http://www-dt.e-technik.uni-dortmund.de/~ma/qmail-bugs.html sendmail is by no means perfect, but ne

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Scott Moynes ([EMAIL PROTECTED]): > Thanks, that was enlightening. Yr. very welcome. I count it a major success when I can add clarity to a traditionally flame-shrouded subject. ;-> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAI

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Scott Moynes
* Rick Moen ([EMAIL PROTECTED]) wrote: > FYI: > ... > Thanks, that was enlightening. -- Scott Moynes http://www.icculus.org/openbox/ "Computer science is as much about computers as astronomy is about telescopes." -- Dijkstra msg07333/pgp0.pgp Description: PGP signature

Re: SV: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Brian Jonnes
On Thu 10 Oct 02 15:47, Iñaki Martínez wrote: > Kaixo Magnus Wiklander!!! > > > Try this. > > > > http://packages.debian.org/stable/non-us/sslwrap.html > > With this a solve the SSL problem, but with SMTP i do not have > authentication. info exim. You'll need to mess around with lookups and lsea

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Scott Moynes ([EMAIL PROTECTED]): > * Michael Marziani ([EMAIL PROTECTED]) wrote: >> There have been no security hacks to qmail for over 3 years. >> Sendmail certainly can't say that. > > Depends what your definition of "security hacks" is. > http://www-dt.e-technik.uni-dortmund.de/~ma/q

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Scott Moynes
* Michael Marziani ([EMAIL PROTECTED]) wrote: > There have been no security hacks to qmail for over 3 years. > Sendmail certainly can't say that. Depends what your definition of "security hacks" is. http://www-dt.e-technik.uni-dortmund.de/~ma/qmail-bugs.html sendmail is by no means perfect, but n

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Giacomo Mulas ([EMAIL PROTECTED]): > What about one of the many MTAs which natively support tls? Not excessively difficult with any of the most-used MTAs, in any event. Some (Postfix, Qmail, Exim) require patching/extensions or a prepatched package. Some (Sendmail, Courier-MTA) do not.

Re: SV: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Brian Jonnes
On Thu 10 Oct 02 15:47, Iñaki Martínez wrote: > Kaixo Magnus Wiklander!!! > > > Try this. > > > > http://packages.debian.org/stable/non-us/sslwrap.html > > With this a solve the SSL problem, but with SMTP i do not have > authentication. info exim. You'll need to mess around with lookups and lse

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Giacomo Mulas ([EMAIL PROTECTED]): > What about one of the many MTAs which natively support tls? Not excessively difficult with any of the most-used MTAs, in any event. Some (Postfix, Qmail, Exim) require patching/extensions or a prepatched package. Some (Sendmail, Courier-MTA) do not.

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Kaixo Giacomo Mulas!!! > > I need authentication + SSL (with/out stunnel/wrapper) to relay email. > > What about one of the many MTAs which natively support tls? Off the top of > my head I remember the exim-tls and postfix-tls packages, there surely are > many others. I _think_ (but did not try)

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Giacomo Mulas
On Thu, 10 Oct 2002, Iñaki Martínez wrote: > I need authentication + SSL (with/out stunnel/wrapper) to relay email. What about one of the many MTAs which natively support tls? Off the top of my head I remember the exim-tls and postfix-tls packages, there surely are many others. I _think_ (but di

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Kaixo Statu Nascendi!!! > But have you been able to authenticate via SSL to qmail? i patched > qmail-smtpd but i could either authenticate, or make ssl connection. never > the both at the same time. I prefere Sendmail, if not qmail...

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Hi Christian Schuerer-Waldheim!!! > Google is your friend! Yes i know.. ;-) > http://www.stunnel.org/patches/desc/syslog_danilche.html > > > http://www.stunnel.org/download/stunnel/mike.daewoo.com.pl/computer/stunnel/stunnel.html > > http://www.octaldream.com/~scottm

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Statu Nascendi
D]> To: Sent: Thursday, October 10, 2002 3:36 PM Subject: RE: SMTP and POP3 with ssl + login/password This is just my opinion, but I much prefer qmail to sendmail. There's something to be said for using what you're familiar with, but coming from the sendmail camp there is no doubt i

Re: SV: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Kaixo Magnus Wiklander!!! > Try this. > > http://packages.debian.org/stable/non-us/sslwrap.html With this a solve the SSL problem, but with SMTP i do not have authentication. This also can be done with stunnel.. > I need to setup a Debian Woody server with th following: > > * SMTP (

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Christian Schuerer-Waldheim
Hi! > I need to setup a Debian Woody server with th following: > > * SMTP (i like sendmail) with: >+ incomming authentication SECURE > to send an email with this server it MUST be necessary authentication > with SSL > > * POP3 (i like qpopper) >

RE: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Michael Marziani
This is just my opinion, but I much prefer qmail to sendmail. There's something to be said for using what you're familiar with, but coming from the sendmail camp there is no doubt in my mind that we made the right decision switching to qmail. There have been no security hacks to qmail for over 3

SV: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Magnus Wiklander
Try this. http://packages.debian.org/stable/non-us/sslwrap.html /Magnus Wiklander. -Ursprungligt meddelande- Från: Iñaki Martínez [mailto:[EMAIL PROTECTED] Skickat: den 10 oktober 2002 15:02 Till: debian-security@lists.debian.org Ämne: SMTP and POP3 with ssl + login/password Hi

SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Hi I need to setup a Debian Woody server with th following: * SMTP (i like sendmail) with: + incomming authentication SECURE to send an email with this server it MUST be necessary authentication with SSL * POP3 (i like qpopper) + outgoing authentication SECURE to

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Kaixo Giacomo Mulas!!! > > I need authentication + SSL (with/out stunnel/wrapper) to relay email. > > What about one of the many MTAs which natively support tls? Off the top of > my head I remember the exim-tls and postfix-tls packages, there surely are > many others. I _think_ (but did not try

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Giacomo Mulas
On Thu, 10 Oct 2002, Iñaki Martínez wrote: > I need authentication + SSL (with/out stunnel/wrapper) to relay email. What about one of the many MTAs which natively support tls? Off the top of my head I remember the exim-tls and postfix-tls packages, there surely are many others. I _think_ (but d

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Kaixo Statu Nascendi!!! > But have you been able to authenticate via SSL to qmail? i patched > qmail-smtpd but i could either authenticate, or make ssl connection. never > the both at the same time. I prefere Sendmail, if not qmail... -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Hi Christian Schuerer-Waldheim!!! > Google is your friend! Yes i know.. ;-) > http://www.stunnel.org/patches/desc/syslog_danilche.html > > >http://www.stunnel.org/download/stunnel/mike.daewoo.com.pl/computer/stunnel/stunnel.html > > http://www.octaldream.com/~scottm

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Statu Nascendi
> To: <[EMAIL PROTECTED]> Sent: Thursday, October 10, 2002 3:36 PM Subject: RE: SMTP and POP3 with ssl + login/password This is just my opinion, but I much prefer qmail to sendmail. There's something to be said for using what you're familiar with, but coming from the sendmail c

Re: SV: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Kaixo Magnus Wiklander!!! > Try this. > > http://packages.debian.org/stable/non-us/sslwrap.html With this a solve the SSL problem, but with SMTP i do not have authentication. This also can be done with stunnel.. > I need to setup a Debian Woody server with th following: > > * SMTP

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Christian Schuerer-Waldheim
Hi! > I need to setup a Debian Woody server with th following: > > * SMTP (i like sendmail) with: >+ incomming authentication SECURE > to send an email with this server it MUST be necessary authentication > with SSL > > * POP3 (i like qpopper) >

RE: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Michael Marziani
This is just my opinion, but I much prefer qmail to sendmail. There's something to be said for using what you're familiar with, but coming from the sendmail camp there is no doubt in my mind that we made the right decision switching to qmail. There have been no security hacks to qmail for over 3

SV: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Magnus Wiklander
Try this. http://packages.debian.org/stable/non-us/sslwrap.html /Magnus Wiklander. -Ursprungligt meddelande- Från: Iñaki Martínez [mailto:[EMAIL PROTECTED]] Skickat: den 10 oktober 2002 15:02 Till: [EMAIL PROTECTED] Ämne: SMTP and POP3 with ssl + login/password Hi I need to

SMTP and POP3 with ssl + login/password

2002-10-10 Thread Iñaki Martínez
Hi I need to setup a Debian Woody server with th following: * SMTP (i like sendmail) with: + incomming authentication SECURE to send an email with this server it MUST be necessary authentication with SSL * POP3 (i like qpopper) + outgoing authentication SECURE to

problem with pop3

2002-05-15 Thread César Augusto Seronni Filho
Hi guys, I am having one problem with pop3, I am using ipop3d and its working fine to receive messges from my local clients(in my LAN). But when i try to get messages from external client(remote notebooks with dialup connection to Internet using normal ISP) the connection is too slow, i can&#

problem with pop3

2002-05-15 Thread César Augusto Seronni Filho
Hi guys, I am having one problem with pop3, I am using ipop3d and its working fine to receive messges from my local clients(in my LAN). But when i try to get messages from external client(remote notebooks with dialup connection to Internet using normal ISP) the connection is too slow, i can&#

Re: secure pop3

2001-08-04 Thread Michael Knoop
I have done this, and it is not hard. You have to connect SSH with local port forwarding on port 110. Then, set your mail client to use a pop3 server on localhost. SSH will forward the pop3 request to the connected machine and send your mail back along the same connection, as if the server

Re: secure pop3

2001-08-03 Thread Gabriel Rocha
,[ On Thu, Aug 02, at 12:20PM, Vineet Kumar wrote: ]-- | This is only the case if you use the -g option with ssh or have | "GatewayPorts yes" in your config file. The default is (thankfully) | "no". Otherwise, the forwarded port is bound to the localhost interface | only. The defa

Re: secure pop3

2001-08-03 Thread Alvin Oga
hi ya list of secure pop3 methodologies http://www.Linux-Sec.net/Mail/secure_pop3.txt c ya alvin On Thu, 2 Aug 2001, GARGIULO Eduardo INGDESI wrote: > Hi all. > > I have a smtp/pop3 server behind a firewall at work and I can login the > server using ssh. The problem is t

Re: secure pop3

2001-08-02 Thread Alvin Oga
hi ya list of secure pop3 methodologies http://www.Linux-Sec.net/Mail/secure_pop3.txt c ya alvin On Thu, 2 Aug 2001, GARGIULO Eduardo INGDESI wrote: > Hi all. > > I have a smtp/pop3 server behind a firewall at work and I can login the > server using ssh. The problem is t

Re: secure pop3

2001-08-02 Thread Vineet Kumar
* Michael Knoop ([EMAIL PROTECTED]) [010802 11:41]: > I have done this, and it is not hard. You have to connect SSH with local > port forwarding on port 110. Then, set your mail client to use a pop3 > server on localhost. SSH will forward the pop3 request to the connected > mach

Re: secure pop3

2001-08-02 Thread Gabriel Rocha
,[ On Thu, Aug 02, at 12:20PM, Vineet Kumar wrote: ]-- | This is only the case if you use the -g option with ssh or have | "GatewayPorts yes" in your config file. The default is (thankfully) | "no". Otherwise, the forwarded port is bound to the localhost interface | only. The defau

Re: secure pop3

2001-08-02 Thread Vineet Kumar
* Michael Knoop ([EMAIL PROTECTED]) [010802 11:41]: > I have done this, and it is not hard. You have to connect SSH with local > port forwarding on port 110. Then, set your mail client to use a pop3 > server on localhost. SSH will forward the pop3 request to the connected > mach

Re: secure pop3

2001-08-02 Thread Alson van der Meulen
On Thu, Aug 02, 2001 at 10:49:53AM -0300, GARGIULO Eduardo INGDESI wrote: > Hi all. > > I have a smtp/pop3 server behind a firewall at work and I can login the > server using ssh. The problem is that the port 110 is closed for external > interface, so I can't get my emai

  1   2   >