D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Mail server setup review

 

On Tuesday 19 April 2005 5:25 pm, Martin White wrote:
A few weeks back i was asking about the whole scenario of getting my
server to go and retreive my mail and then serve it up to me locally via
imap.

I have:
- postfix as my mta
- fetchmail going off and getting my mail for me (every 5 minutes)
- courier serving it back up locally via imap
- squirrelmail serving it up via web when i'm away

It seems to be working very well incidentally so thank you to the guidance
i was given!

I just want to know if i should be concerned about security at all.

Yes, and not just with regard to squirrelmail - you also need to make sure 
fetchmail is behaving itself.

Fetchmail can use encryption, IF the remote server supports it. Append ssl to 
the fetchmail line. This protects your password from being sniffed during the 
download phase.

If your server does NOT support SSL for POP3, change! You can't afford to send 
passwords in plain text this often.

-- 

Neil Williams
=============
http://www.dcglug.org.uk/
http://www.nosoftwarepatents.com/
http://www.linux.codehelp.co.uk/

Attachment: pgp00021.pgp
Description: PGP signature