Re: [cobalt-developers] RaQ3/4: IMAP & qpopper (unofficial RPMs and PKGs proposal)

[Michael Stauber <devel@xxxxxxxxxxxxxx>]

Hi Frostie,

> To get POP-Before-SMTP to work without modifying it, I start qpopper with
> the -R command line switch in inetd.conf. This logs POP3 logins with the IP
> address only, instead of the name.

The -R switch actually only suppresses reverse name lookups. In order to have 
the IP-addresses logged in the syslog facility you need to build qpopper with 
the "--enable-log-login" switch.

> I'm getting ready to put 4.0.4 in and I plan to keep the uw-kludge support
> in place and add the ability in qpopper to support APOP and/or POP logins.
> I find the restriction in the RaQ4 interface on APOP to be annoying.

Yeah, it defenitely is kinda annoying. But I'm quite happy that APOP finally 
works in general. 

> I hadn't looked at IMAP the way you did -- looks like I'll be needing to do
> that as well.

The question if the IMAP on the RaQs is vulnerable or not has often been 
brought up in several places, but SUN/Cobalt refused to comment on that one. 
Based on the version information it most likely is, so it might be better to 
play it safe than sorry.

-- 

Mit freundlichen Grüßen / With best regards

Michael Stauber
mstauber@xxxxxxxxxxxxxx
Unix/Linux Support Engineer