Date: Tue, 21 Jul 1998 15:30:05 -0600 From: Brett Glass <brett@lariat.org> To: ben@efn.org Cc: Jeremy Shaffner <jer@jorsm.com>, security@FreeBSD.ORG Subject: Re: Why is there no info on the QPOPPER hack? Message-ID: <199807212130.PAA17747@lariat.lariat.org> In-Reply-To: <Pine.BSF.3.96.980721141904.12932A-100000@Tyr.office.EFN.or g> References: <199807211928.NAA15499@lariat.lariat.org>
next in thread | previous in thread | raw e-mail | index | archive | help
At 02:22 PM 7/21/98 -0700, Ben wrote: >Due to the large cpu usage, and the disk space needed on large production >machines for /var/pop when qpopper copies over the users mail spool, we went >to using cucipop. You might try this too, it uses about 30% less cpu, and >doesn't have these exploits(yet? I haven't looked through it's code) > > -> ftp://ftp.informatik.rwth-aachen.de/pub/packages/cucipop/ > I have written the developer asking if cucipop supports XTND XMIT. This command is necessary to allow users who log in from outside the LAN to send e-mail through the server, since we have disabled relaying to avoid spam. I haven't gotten an answer. >The only way to be truly secure is to stay on top of things. Why wasn't someone >else filling in for you during your vacation? There was one, and he would have called me if he'd seen a problem. But people who know UNIX even at the level I know it (approximately journeyman level; I'm certainly no expert sysadmin) are in short supply . He's an NT expert, and would have called me for direction if he had to do anything nontrivial. --Brett To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807212130.PAA17747>