On Thu, 9 Jul 2009, Reinaldo de Carvalho wrote:
> On Thu, Jul 9, 2009 at 2:05 AM, Pascal
> Gienger wrote:
>>
>> Imagine a Cyrus Box only accepting LMTP connections, no sendmail, no
>> Postfix, no other SMTP MTA running on it.
>> Then imagine a frontend smtp relay delivering directly via LMTP over
On Thu, Jul 9, 2009 at 2:05 AM, Pascal
Gienger wrote:
>
> Imagine a Cyrus Box only accepting LMTP connections, no sendmail, no
> Postfix, no other SMTP MTA running on it.
> Then imagine a frontend smtp relay delivering directly via LMTP over TCP
> to your Cyrus box. You can use lmtp auth then to pr
Nikolaus Rath schrieb:
> But unless I have some exotic filtering and/or rate limiting configured,
> he can do exactly the same thing by connecting to localhost:smtp, or
> invoking sendmail directy, can't he? So why the additional protection
> for lmtp?
Imagine a Cyrus Box only accepting LMTP conn
Andrew Morgan writes:
> On Wed, 8 Jul 2009, Pascal Gienger wrote:
>
>> Nikolaus Rath schrieb:
>>> Hello,
>>>
>>> Apparently (http://wiki.exim.org/CyrusImap) I need to let lmtpd accept
>>> connections from localhost as pre-authenticated to make cyrus and exim
>>> work nicely together.
>>>
>>> Can s
On Wed, 8 Jul 2009, Pascal Gienger wrote:
> Nikolaus Rath schrieb:
>> Hello,
>>
>> Apparently (http://wiki.exim.org/CyrusImap) I need to let lmtpd accept
>> connections from localhost as pre-authenticated to make cyrus and exim
>> work nicely together.
>>
>> Can someone explain what this actually
Nikolaus Rath schrieb:
> Hello,
>
> Apparently (http://wiki.exim.org/CyrusImap) I need to let lmtpd accept
> connections from localhost as pre-authenticated to make cyrus and exim
> work nicely together.
>
> Can someone explain what this actually means security wise? I.e. what
> could a malicious
