If you look at the way that Davide organized the code, I think that adding
OpenSSL would not be a lot of trouble :)  And it has already been ported to
most major platforms...
Just my $.000000000002 worth :)

S

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of decker
Sent: Sunday, March 21, 2004 3:58 AM
To: [EMAIL PROTECTED]
Subject: [xmail] Re: Wish list

Hi all,

One problem with using stunnel is that on most platforms all messages will
appear to come from localhost/127.0.0.1 since it will go:

sender -> server-stunnel-ssl:465 -> server-smtpd-cleartext:25 -> rcpt

One thing to watch out for is that if you allow relaying from localhost
(almost all mail servers do by default i think?) then you allow yourself to
become an open relay since the smtpd will be seeing only the localhost ip
since the mail is coming from stunnel rather than a remote address.

stunnel does have a transparent mode but it doesn't always work:
http://www.stunnel.org/faq/transparent.html

Trying to write in SSL to xmail is a pretty large task I'd imagine and would
surely open the way for more pains than pleasures with it. Although I'd love
to see native SSL support I have to support the K.I.S.S. ideology in this
case.

-Darren
-
To unsubscribe from this list: send the line "unsubscribe xmail" in the body
of a message to [EMAIL PROTECTED] For general help: send the line
"help" in the body of a message to [EMAIL PROTECTED]



-- Binary/unsupported file stripped by Ecartis --
-- Type: application/x-pkcs7-signature
-- File: smime.p7s


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to