Re: popa3d/stunnel (OpenBSD 3.3)

[Robert McMeekin <viper@mcmeekin.info>]

On Tue, 2 Sep 2003 10:28:16 +0200, Tor Houghton wrote:
> On Tue, Sep 02, 2003 at 03:12:26AM -0400, Robert McMeekin wrote:
[...]
> >    I'm still a newbie as far as computers go (and especially
> > OpenBSD), but I just set up a popa3d/stunnel and documented the
> > process in my journal [http://rrm3.livejournal.com/4484.html].  Just
> > thought I'd share think link on the mailing list in case anyone
> > needed it.
>
> FWIW, I'd probably make the POP daemon only listen on the loopback
> interface, in order to prevent accidental cleartext logins.

   Thanks for the tip, I will figure out how to do that and update the
entry.  But just to clarify, your saying that people might try and
connect to port 995 and login without ssl?  Wouldn't they just be
disconnected after they tried to send a ``USER'' line?  And if they
tried to connect to port 110 the would get rejected because the pop3
line is commented out by default in /etc/inetd.conf.  I'll keep
thinking, but if you can point out my error that would probably save me
some time.  Thanks again.

//Rob
--
Only through hard work and perseverance can one truly suffer.