Hi all,

One problem with using stunnel is that on most platforms all messages will appear to 
come from localhost/127.0.0.1 since it will go:

sender -> server-stunnel-ssl:465 -> server-smtpd-cleartext:25 -> rcpt

One thing to watch out for is that if you allow relaying from localhost (almost all 
mail servers do by default i think?) then you allow yourself to become an open relay 
since the smtpd will be seeing only the localhost ip since the mail is coming from 
stunnel rather than a remote address.

stunnel does have a transparent mode but it doesn't always work:
http://www.stunnel.org/faq/transparent.html

Trying to write in SSL to xmail is a pretty large task I'd imagine and would surely 
open the way for more pains than pleasures with it. Although I'd love to see native 
SSL support I have to support the K.I.S.S. ideology in this case.

-Darren
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to