From: Erwan David (erwanrail.eu.org)
Date: Fri Oct 14 2005 - 09:15:22 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Le Fri 14/10/2005, Robert Felber disait
> On Fri, Oct 14, 2005 at 03:46:52PM +0200, Robert Felber wrote:
> > On Fri, Oct 14, 2005 at 08:32:33AM -0500, S. Highlander wrote:
> > > good afternoon all,
> > >
> > > question: i am wondering if my mail system would be a little more secure if
> > > instead of forwarding mail from my gateway machine to my internal mail
> > > server, i used a program like fetchmail on the internal mail server to pick
> > > up mail from the gateway machine.
> > >
> > > i have an email gateway, named dmz, and an intranet mail server, named
> > > internal, set up as described below. i set up both servers using
> > > instructions from the following document:
> > > http://www.postfix.org/STANDARD_CONFIGURATION_README.html#firewall .
> >
> > Why should a cleartext protocol (POP) be more secure than the option of
> > forwarding mail from the gateway to internal vial SMTP TLS/SSL? Unless there
> > are POP TLS/SSL implementations.
>
> Ok, fetchmail supports SSL. However, I suppose setting up a POP daemon with
> SSL suport is kind of overhead (using stunnel and the like).

courier, cyrus, dovecot support pop3 wth ssl (they also support the
STLS pop3 extension).

--
Erwan David
==========================================================
Trusted Logic Tel: +33 1 30 97 25 03
5 rue du Bailliage Std: +33 1 30 97 25 00
78000 Versailles Fax: +33 1 30 97 25 19
France

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]