Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Zachariah Mully
On Thu, 2009-03-26 at 16:59 -0700, Florin Andrei wrote: I want to read my email on the iPhone. To do that, I have 2 options: 1. VPN 2. IMAP-over-SSL #1 is a bit convoluted, I already run a VPN server, with OpenVPN, but the iPhone doesn't have an OpenVPN client. Running *two* VPN networks

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Joseph Brennan
--On Friday, March 27, 2009 9:46 -0400 Zachariah Mully zmu...@smartbrief.com wrote: How comfortable y'all are with exposing Cyrus IMAPd's imaps port to the big wild Internet? Not much point running it if you can't connect to it, is there? It's totally standard. Actually you need only

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Raymond T. Sundland
Whenever you open services to the internet, you're taking a chance. I've been running Cyrus IMAP open to the Internet for years and have never had any issues, but I may have just been lucky. There are plenty of sources available for looking for the history of vulnerabilities for various

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Zachariah Mully
On Fri, 2009-03-27 at 11:06 -0700, Florin Andrei wrote: The thing worrying me at this time is some stupid buffer overflow in the IMAP server code. I have no idea what's the security history of this server, even though I've been using it for quite a while, because it was always in tightly

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Wesley Craig
On 27 Mar 2009, at 14:06, Florin Andrei wrote: The thing worrying me at this time is some stupid buffer overflow in the IMAP server code. I have no idea what's the security history of this server, even though I've been using it for quite a while, because it was always in tightly

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-27 Thread Bron Gondwana
On Thu, Mar 26, 2009 at 04:59:07PM -0700, Florin Andrei wrote: I want to read my email on the iPhone. To do that, I have 2 options: 1. VPN 2. IMAP-over-SSL #1 is a bit convoluted, I already run a VPN server, with OpenVPN, but the iPhone doesn't have an OpenVPN client. Running *two* VPN

thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-26 Thread Florin Andrei
I want to read my email on the iPhone. To do that, I have 2 options: 1. VPN 2. IMAP-over-SSL #1 is a bit convoluted, I already run a VPN server, with OpenVPN, but the iPhone doesn't have an OpenVPN client. Running *two* VPN networks seems excessive for a small personal server - not that the

Re: thoughts on running an IMAP-over-SSL server exposed to the Internet?

2009-03-26 Thread Craig White
On Thu, 2009-03-26 at 16:59 -0700, Florin Andrei wrote: I want to read my email on the iPhone. To do that, I have 2 options: 1. VPN 2. IMAP-over-SSL #1 is a bit convoluted, I already run a VPN server, with OpenVPN, but the iPhone doesn't have an OpenVPN client. Running *two* VPN networks