From owner-freebsd-security Tue Jan 30 10:29:42 2001 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0BE9A37B491 for ; Tue, 30 Jan 2001 10:29:25 -0800 (PST) Received: from homer.softweyr.com (bsdconspiracy.net [208.187.122.220]) by mx1.FreeBSD.org (Postfix) with ESMTP id C50776E26F4 for ; Tue, 30 Jan 2001 10:29:23 -0800 (PST) Received: from [127.0.0.1] (helo=softweyr.com ident=Fools trust ident!) by homer.softweyr.com with esmtp (Exim 3.16 #1) id 14NfZc-0000ZD-00; Tue, 30 Jan 2001 11:32:12 -0700 Message-ID: <3A7708AC.8B490984@softweyr.com> Date: Tue, 30 Jan 2001 11:32:12 -0700 From: Wes Peters Organization: Softweyr LLC X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.12 i386) X-Accept-Language: en MIME-Version: 1.0 To: "Edward W. M." Cc: freebsd-security@FreeBSD.ORG Subject: Re: POP3 / IMAP security References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org "Edward W. M." wrote: > > Hi everyone, > > I apologize in advance if you feel that I should have posted > this to questions. > > I intend to run POP and IMAP services on a new machine, so I > need easily deployable secure servers that can be installed from > the ports. > > Cyrus is out of the question for me, I am running that on another > box and I just need something more easily deployable for this one. > All my users have shell access and log in via ssh, so the bugs > in the UW imap server are not that relevant, but still, that is > one bug-ridden piece of software and I think it's just a matter > of time before another security related bug is discovered. The > same goes for popper and as I do not have the time to do the > research, I hope to hear from experienced admins out there who have > done the research (tee hee :-)) and are willing to share their > knowledge and experience. Courier. It's GPL, but it seems reliable. I'm learning quite a bit more about it right now, working on an authentication module to work with our user database (stored in PostgreSQL). Courier works well with either BSD-style mailboxes or Maildirs. We use it in conjunction with Qmail, though I am experimenting with Cyrus and Postfix as well. -- "Where am I, and what am I doing in this handbasket?" Wes Peters Softweyr LLC wes@softweyr.com http://softweyr.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message