From owner-freebsd-isp Fri Jun 23 4:44: 8 2000 Delivered-To: freebsd-isp@freebsd.org Received: from durango.picus.com (durango.picus.com [209.100.20.19]) by hub.freebsd.org (Postfix) with ESMTP id B29C337B5CD for ; Fri, 23 Jun 2000 04:44:05 -0700 (PDT) (envelope-from troy@picus.com) Received: from abyss [209.100.22.250] by durango.picus.com (SMTPD32-5.05) id ACEC6001BC; Fri, 23 Jun 2000 07:41:32 -0400 From: "Troy Settle" To: "Sean J. Schluntz" , "Danny" Cc: Subject: RE: Question about ways to do eMail authintication. Date: Fri, 23 Jun 2000 07:43:08 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 In-Reply-To: <200006222220.PAA13281@mail.workofstone.net> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org We do this using PHP. The key we generate and email to the user is something like this: $key = substr(md5($username . $email . $time . $REMOTE_HOST),0,8) It's not perfect, but it's sufficient to prevent guessing, and has worked well enough for us over the last couple years. Similar functions are availiable in perl and can also be duplicated in a simple shell script (/sbin/md5). G'luck, -- Troy Settle Network Analyst Picus Communications 540.633.6327 ** -----Original Message----- ** From: owner-freebsd-isp@FreeBSD.ORG ** [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of ** schluntz@timberwolf.workofstone.net ** Sent: Thursday, June 22, 2000 6:17 PM ** To: Danny ** Cc: freebsd-isp@freebsd.org ** Subject: Re: Question about ways to do eMail authintication. ** ** ** ** In message <00062408211500.00297@dannyh.freebsd.org>, Danny writes: ** >- Digitial Signatures? ** >- Digital signature does use the hashing technique ** >-Hope that helps ** ** I've got a couple of ideas on how to do it, but I really ** don't want to have ** to build it myself. I'm hoping someone knows of a package that does ** something like it already (like some mail-list software ** packages do, you ** have to respond to them before they subscribe you.) ** ** Thanks for the feedback though! ** ** -Sean ** ** ** To Unsubscribe: send mail to majordomo@FreeBSD.org ** with "unsubscribe freebsd-isp" in the body of the message ** To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message