Hi!
>prevent this. So you better live with it. If you want authentication I
Ok ok, I see there is still alot of work to do to make internet and
especially email more secure. smtp should die very fast.

>suggest to use pgp or similar. Everything else won't really help.
Is there some smtp-auth with pgp???

I now know about these ways of securing smtp (please correct me if I´m
wrong):

"SMTP Service Extension for Authentication" as defined in
http://www.theinternetbook.net/RFC/rfc2554.html

This is an Authentication mechanism based on the so called SASL, as
defined in http://www.theinternetbook.net/RFC/rfc2222.html

There is a patch for this that comes with the source-packages and also
rpms.

This means, there is some auth going on between client and server and
passwords are sent over the line. This passwords can be encrypted, but
the connection itself is NOT encrypted like via ssh or ssl, that´s why
there is

"SMTP Service Extension for Secure SMTP over TLS" as defined in
http://www.theinternetbook.net/RFC/rfc2487.html

which can be found here for postfix:
http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/

Is this right?

So if I want to have it like sendmail can do it now (I read), I have to:
1.) Apply the patchkit for TLS
2.) Build postfix with SASL support.
3.) somehow configue main.cf and master.cf
(don´t know how to get this together)

[4.) And finally all this chrooted]

Is this right?

Isn´t there a rpm-binary out there which supports that (Simon?)
Or at least a howto by an wise (wo)man who did this before?

I am not sure about all that. Maybe I am mixing it all up now?

Thanks for your attention,
Peter

-
To unsubscribe, send mail to majordomopostfix.org with content
(not subject): unsubscribe postfix-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]