Dovecot - pop-before-smtp

[Alex Neuman van der Hans]

You should enable SMTP AUTH instead. POP before SMTP is unreliable and, in
the worst of cases, spoofable. Implementing SMTP AUTH adds an extra measure
of protection, since your server will (and shouldn't ever) relay any message
without proper authentication.

________________________________

From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Wess Bechard
Sent: Thursday, January 13, 2005 10:07 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Dovecot - pop-before-smtp


Marcel,

This may not be the answer you are looking for, but consider using smtp
authentication with cyrus-sasl or similar software.

I have been using pop-before-smtp with MS and postfix for over 6 months now.
Pop-before-smtp has given me so many problems that I have been forced to
dump it.  The perl and C versions randomly crash for me after a few hours.

Cyrus-SASL is a great solution, and is much more secure, especially if you
have remote users.


On Thu, 2005-01-13 at 09:56, Marcel Blenkers wrote:

        Hi there,

        maybe someone on this list could help me, as the ml of
pop-before-smtp
        seems not work at all ;)

        Heard of dovecot on this ml and saw that this would be a
pop3/imap-daemon,
        which could help me a lot..

        so i tried the pop-before-smtp-programm, as stated on the
website..and
        managed to get it working..

        now my problem is the following..

        it seems that my berkley db and the Module DB_File are way uptodate
(yes,
        that could happen ;) as they produce a db-file with version 8..but i
do
        need version 7.

        access.db: Berkeley DB (Hash, version 7, native byte-order)
        popauth.db: Berkeley DB (Hash, version 8, native byte-order)


        due to the fact that the file popauth.db is not really version 7,
sendmail
        is not able to read and use it..

        So..maybe some of the geeks in here could help? :)

        Greetings

        Marcel

        ------------------------ MailScanner list ------------------------
        To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
        'leave mailscanner' in the body of the email.
        Before posting, read the MAQ (http://www.mailscanner.biz/maq/
<http://www.mailscanner.biz/maq/> ) and
        the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html
<http://www.jiscmail.ac.uk/lists/mailscanner.html> ).

        Support MailScanner development - buy the book off the website!

Wess Bechard
System Administrator
eliquidMEDIA International
www.eliquid.com

MailScanner on IRC
Community Support
irc.freenode.net
#mailscanner

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/)
and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!