I now have a Linux QMAIL IMAP/POP2/POP3(APOP) Server ready for BETA testing.
The only changes from the default Pine IMAP/POP2/POP3 4.1.BETA server are:
1. QMAIL patch to use $HOME/Mailbox
2. Patches to work with RedHat Linux 4.1 (probably works with previous versions also)
3. APOP patch (implemented by checking $HOME/.apop file)
I have been testing APOP with Win95 Eudora Light 3.0.1 and it seems to be working
fine. I will test it with MAC Eudora Light 3.0.2 in the next day or so.
You can find it on ftp://summersoft.fay.ar.us/pub/qmail directory.
Please let me know if you find any problems.
The only problem I currently know about is that if you do:
apop UnknownUser m5sumHashCode
then it aborts immediately rather than saying Bad Login. This would let people
probe whether a user exists or not on the system. I'll be looking in to this
later.
For those that don't know, APOP lets the client and server share a secret password
that is not transmitted in the clear over the comm. line. It uses the option APOP
command in the RFC 1725 POP3 standard.
- David Summers
The only changes from the default Pine IMAP/POP2/POP3 4.1.BETA server are:
1. QMAIL patch to use $HOME/Mailbox
2. Patches to work with RedHat Linux 4.1 (probably works with previous versions also)
3. APOP patch (implemented by checking $HOME/.apop file)
I have been testing APOP with Win95 Eudora Light 3.0.1 and it seems to be working
fine. I will test it with MAC Eudora Light 3.0.2 in the next day or so.
You can find it on ftp://summersoft.fay.ar.us/pub/qmail directory.
Please let me know if you find any problems.
The only problem I currently know about is that if you do:
apop UnknownUser m5sumHashCode
then it aborts immediately rather than saying Bad Login. This would let people
probe whether a user exists or not on the system. I'll be looking in to this
later.
For those that don't know, APOP lets the client and server share a secret password
that is not transmitted in the clear over the comm. line. It uses the option APOP
command in the RFC 1725 POP3 standard.
- David Summers