From owner-freebsd-questions Sat Jun 19 15:52:42 1999 Delivered-To: freebsd-questions@freebsd.org Received: from pasha.anand.org (pasha.anand.org [199.103.176.41]) by hub.freebsd.org (Postfix) with SMTP id 743F714A12 for ; Sat, 19 Jun 1999 15:52:24 -0700 (PDT) (envelope-from arb@anand.org) Received: (qmail 13457 invoked by uid 1001); 19 Jun 1999 22:31:52 -0000 Date: Sun, 20 Jun 1999 01:31:52 +0300 From: Anand Buddhdev To: Alfred Perlstein Cc: questions@freebsd.org Subject: Re: which POP server to install? Message-ID: <19990620013152.A13330@africaonline.co.ke> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.5i In-Reply-To: ; from Alfred Perlstein on Sat, Jun 19, 1999 at 04:20:50PM -0500 Organisation: Africa Online Ltd, P O Box 63017, Nairobi, Kenya X-Phone: +254-2-243775 X-WWW-Homepage: http://www.anand.org Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, Jun 19, 1999 at 04:20:50PM -0500, Alfred Perlstein wrote: > With the recent pop3 daemon exploits, I'm loath to install these > programs, of course customers want pop and imap access to thier > email. > > Does anyone have a suggestion as to what pop3 server to install, and > perhaps any suggestions for configuration? > > Some considerations are: > APOP (authentication), pop3, imap, server flexibility > and of course security. > > Any suggestions would be helpful from people who are familiar with > these programs. The choice of POP server depends on many things: mailbox format, security, speed, sometimes even MTA. The following are some POP servers with some descriptions - look around, and then find one that suits you: 1. qmail-pop3d - works only with Maildir format. You can use it with any MTA - qmail, exim and postfix do direct Maildir delivery, sendmail can be coaxed to do Maildir with maildrop as the delivery agent. This POP server is modular - the authentication is done separately with another program called qmail-popup. By default it supports only plain text passwords, but can very easily be modified for APOP. qmail-pop3d is very fast and small. 2. cucipop - works with mbox format. very fast and very small - supports /etc/passwd by default. It can be modified for other auth schemes, but personally I couldn't really follow the code very well, although I've heard is is well written, if not clearly commented. 3. UW POP+IMAP server - supports mbox, mbx and various other formats. I found it very inflexible - not much support for alternate auth schemes. Also very big. 4. Our favourite qpopper - slow, big, buggy (older versions), the list goes on. Avoid it if possible. 5. cyrus - this one is a POP+IMAP server all in one. However, it works in "sealed-box" mode. You pipe messages from your MTA to cyrus's deliver program, which goes and stores the mail in a format internal to cyru,s and the only interfaces to it are POP and IMAP. Very fast. People say good things about it. However, by default it only supports /etc/passwd, and Kerberos. I don't know about APOP. -- Anand To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message