Mail processing tool

2004-01-25 Thread Raffaele D'Elia
I need a tool that does the following work: checks for new mail in a maibox via pop3; verify the digital signature and decrypts the mail; parse the body; executes 1 or more action (completely customizzable); delete (archives) the mail; in an endless loop. Something like this already exists or I n

Re: Mail processing tool

2004-01-25 Thread Russell Coker
On Sun, 25 Jan 2004 20:49, "Raffaele D'Elia" <[EMAIL PROTECTED]> wrote: > checks for new mail in a maibox via pop3; If you use IMAP it should be possible for you to ask the server to notify you when new mail is received. This should give you a faster response if the server correctly implements

Re: Mail processing tool

2004-01-25 Thread Per Olofsson
On Sun, Jan 25, 2004 at 21:35 +1100, Russell Coker wrote: > If you use IMAP it should be possible for you to ask the server to notify you > when new mail is received. ... > Last time I tested this functionality I found it not to work in Courier IMAP, > but this may have been fixed in a more recen

security of apt

2004-01-25 Thread Erik Hjelmås
Hi, I've spent a few hours searching, what Im looking for is a discussion of different security aspects of apt, questions like - What are the possible threats in terms of ip spoofing, dns cache poisoning? (are there any solutions in terms of PKI (PGP) or similar discussed somewhere?) - If I need t

Re: New listing: S. Keeling

2004-01-25 Thread Matt Kraai
On Fri, Jan 23, 2004 at 12:57:37PM -0700, s. keeling wrote: > Hi. Thanks for this. > > * Name: Stephen Keeling > * Company: TopQuark Software & Services Consulting Ltd. > * Address: see homepage. > * Phone: (403) 245-2939 > * Fax: N/A > * Email: [EMAIL PROTECTED] > * URL: http://www

Re: Mail processing tool

2004-01-25 Thread Jonas J Linde
And [EMAIL PROTECTED] spoke unto the world. And said: > I need a tool that does the following work: > checks for new mail in a maibox via pop3; > verify the digital signature and decrypts the mail; > parse the body; > executes 1 or more action (completely customizzable); > delete (archives) the mai

Re: security of apt

2004-01-25 Thread Horst Pflugstaedt
On Sun, Jan 25, 2004 at 04:12:59PM +0100, Erik Hjelmås wrote: > Hi, > > I've spent a few hours searching, what Im looking for is a discussion > of different security aspects of apt, questions like > - What are the possible threats in terms of ip spoofing, dns cache > poisoning? (are there any solu

Re: security of apt

2004-01-25 Thread Matt Zimmerman
On Sun, Jan 25, 2004 at 06:19:28PM +0100, Horst Pflugstaedt wrote: > On Sun, Jan 25, 2004 at 04:12:59PM +0100, Erik Hjelm?s wrote: > > I've spent a few hours searching, what Im looking for is a discussion > > of different security aspects of apt, questions like > > - What are the possible threats

Re: security of apt

2004-01-25 Thread Alf B Lervaag
Erik Hjelmås wrote: > any pointers to material which may be relevant are greatly appreciated Check out [1]. Might be what you're interested in. [1]. http://monk.debian.net/apt-secure/ -- Alf B Lervåg

Re: Mail processing tool

2004-01-25 Thread s. keeling
Incoming from Jonas J Linde: > And [EMAIL PROTECTED] spoke unto the world. And said: > > I need a tool that does the following work: > > checks for new mail in a maibox via pop3; So, IMAP is the wrong answer. > > verify the digital signature and decrypts the mail; GnuPG > > parse the body; pro

Re: (php?) bug exploit report

2004-01-25 Thread Christian Horchert
On 20.01.2004, at 10:31, Chris Morris wrote: Safe mode would certainly have reduced the impact from that script, and I'd definitely recommend turning it on unless you're very confident of the quality of all your scripts. There's also: - register_globals off (its on by default PHP < 4.2, like in

Re: Mail processing tool

2004-01-25 Thread Lars Ellenberg
/ 2004-01-25 11:06:08 -0700 \ s. keeling: > > This sounds like an ideal job for the combination of the rather > > appropriately named tools fetchmail and procmail, which - to no big > > surprise - are suitable to fetch and process mail. > > Agreed. Add on gnupg for signature verification and decr

Re: Mail processing tool

2004-01-25 Thread Raffaele D'Elia
-Original Message- From: "s. keeling" <[EMAIL PROTECTED]> To: debian-security@lists.debian.org Date: Sun, 25 Jan 2004 11:06:08 -0700 Subject: Re: Mail processing tool > Incoming from Jonas J Linde: > > And [EMAIL PROTECTED] spoke unto the world. And said: > > > I need a tool that does th

Re: Mail processing tool

2004-01-25 Thread Jonas J Linde
And [EMAIL PROTECTED] spoke unto the world. And said: > From: "s. keeling" <[EMAIL PROTECTED]> >> Incoming from Jonas J Linde: >> > And [EMAIL PROTECTED] spoke unto the world. And said: >> > > I need a tool that does the following work: >> > > checks for new mail in a maibox via pop3; >> ... >> pro

Re: Mail processing tool

2004-01-25 Thread Florent Rougon
Jonas J Linde <[EMAIL PROTECTED]> wrote: >> Procmail is a big tool, I need something different: small, reliable, >> secure. > > Big? The gzipped source tar ball is 227kB. If you want something that > processes mail in a fully customizable way I'm pretty sure you won't find > anything much smalle

Re: Mail processing tool

2004-01-25 Thread Rick Moen
Quoting Jonas J Linde ([EMAIL PROTECTED]): > Never had any trouble with fetchmail except if setup badly; eg. with > different programs accessing the same mail box but using different > locking schemes. Fetchmail's a useful tool, but it does require running a local MTA as an inherent part of its d

Re: Mail processing tool

2004-01-25 Thread Adeodato Simó
* Rick Moen [Sun, 25 Jan 2004 17:41:11 -0800]: > Fetchmail's a useful tool, but it does require running a local MTA as an > inherent part of its design. (It does that instead of, itself, having > code to support mail stores.) $ apt-cache show fetchmail | grep -i suggests $ man fetchmail

Re: Mail processing tool

2004-01-25 Thread Rick Moen
Quoting Adeodato Simó ([EMAIL PROTECTED]): > Am I missing something? http://www.catb.org/~esr/fetchmail/ includes: "Fetchmail retrieves mail from remote mail servers and forwards it via SMTP" -- Cheers, Rick Moen "vi is my shepherd; I shall not font." [EMAIL PROT

Re: Mail processing tool

2004-01-25 Thread Adeodato Simó
* Rick Moen [Sun, 25 Jan 2004 17:53:58 -0800]: > Quoting Adeodato Simó ([EMAIL PROTECTED]): > > Am I missing something? > http://www.catb.org/~esr/fetchmail/ includes: >"Fetchmail retrieves mail from remote mail servers and forwards it >via SMTP" fetchmail(1) includes: -

Re: Mail processing tool

2004-01-25 Thread Rick Moen
Quoting Adeodato Simó ([EMAIL PROTECTED]): > fetchmail(1) includes: > >-m | --mda > (Keyword: mda) You can force mail to be passed to an MDA > directly (rather than forwarded to port 25) with the --mda or -m > option. To avoid losin

Re: Mail processing tool

2004-01-25 Thread Tristan Mills
On Sun, Jan 25, 2004 at 05:41:11PM -0800, Rick Moen wrote: > Quoting Jonas J Linde ([EMAIL PROTECTED]): > > > Never had any trouble with fetchmail except if setup badly; eg. with > > different programs accessing the same mail box but using different > > locking schemes. > > Fetchmail's a useful t

Mail processing tool

2004-01-25 Thread Raffaele D'Elia
I need a tool that does the following work: checks for new mail in a maibox via pop3; verify the digital signature and decrypts the mail; parse the body; executes 1 or more action (completely customizzable); delete (archives) the mail; in an endless loop. Something like this already exists or I n

Re: Mail processing tool

2004-01-25 Thread Russell Coker
On Sun, 25 Jan 2004 20:49, "Raffaele D'Elia" <[EMAIL PROTECTED]> wrote: > checks for new mail in a maibox via pop3; If you use IMAP it should be possible for you to ask the server to notify you when new mail is received. This should give you a faster response if the server correctly implements

Re: Mail processing tool

2004-01-25 Thread Per Olofsson
On Sun, Jan 25, 2004 at 21:35 +1100, Russell Coker wrote: > If you use IMAP it should be possible for you to ask the server to notify you > when new mail is received. ... > Last time I tested this functionality I found it not to work in Courier IMAP, > but this may have been fixed in a more recen

security of apt

2004-01-25 Thread Erik Hjelmås
Hi, I've spent a few hours searching, what Im looking for is a discussion of different security aspects of apt, questions like - What are the possible threats in terms of ip spoofing, dns cache poisoning? (are there any solutions in terms of PKI (PGP) or similar discussed somewhere?) - If I need t

Re: New listing: S. Keeling

2004-01-25 Thread Matt Kraai
On Fri, Jan 23, 2004 at 12:57:37PM -0700, s. keeling wrote: > Hi. Thanks for this. > > * Name: Stephen Keeling > * Company: TopQuark Software & Services Consulting Ltd. > * Address: see homepage. > * Phone: (403) 245-2939 > * Fax: N/A > * Email: [EMAIL PROTECTED] > * URL: http://www

Re: Mail processing tool

2004-01-25 Thread Jonas J Linde
And [EMAIL PROTECTED] spoke unto the world. And said: > I need a tool that does the following work: > checks for new mail in a maibox via pop3; > verify the digital signature and decrypts the mail; > parse the body; > executes 1 or more action (completely customizzable); > delete (archives) the mai

Re: security of apt

2004-01-25 Thread Horst Pflugstaedt
On Sun, Jan 25, 2004 at 04:12:59PM +0100, Erik Hjelmås wrote: > Hi, > > I've spent a few hours searching, what Im looking for is a discussion > of different security aspects of apt, questions like > - What are the possible threats in terms of ip spoofing, dns cache > poisoning? (are there any solu

Re: security of apt

2004-01-25 Thread Matt Zimmerman
On Sun, Jan 25, 2004 at 06:19:28PM +0100, Horst Pflugstaedt wrote: > On Sun, Jan 25, 2004 at 04:12:59PM +0100, Erik Hjelm?s wrote: > > I've spent a few hours searching, what Im looking for is a discussion > > of different security aspects of apt, questions like > > - What are the possible threats

Re: security of apt

2004-01-25 Thread Alf B Lervaag
Erik Hjelmås wrote: > any pointers to material which may be relevant are greatly appreciated Check out [1]. Might be what you're interested in. [1]. http://monk.debian.net/apt-secure/ -- Alf B Lervåg -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Cont

Re: Mail processing tool

2004-01-25 Thread s. keeling
Incoming from Jonas J Linde: > And [EMAIL PROTECTED] spoke unto the world. And said: > > I need a tool that does the following work: > > checks for new mail in a maibox via pop3; So, IMAP is the wrong answer. > > verify the digital signature and decrypts the mail; GnuPG > > parse the body; pro

Re: (php?) bug exploit report

2004-01-25 Thread Christian Horchert
On 20.01.2004, at 10:31, Chris Morris wrote: Safe mode would certainly have reduced the impact from that script, and I'd definitely recommend turning it on unless you're very confident of the quality of all your scripts. There's also: - register_globals off (its on by default PHP < 4.2, like in woo

Re: Mail processing tool

2004-01-25 Thread Lars Ellenberg
/ 2004-01-25 11:06:08 -0700 \ s. keeling: > > This sounds like an ideal job for the combination of the rather > > appropriately named tools fetchmail and procmail, which - to no big > > surprise - are suitable to fetch and process mail. > > Agreed. Add on gnupg for signature verification and decr

Re: Mail processing tool

2004-01-25 Thread Raffaele D'Elia
-Original Message- From: "s. keeling" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Date: Sun, 25 Jan 2004 11:06:08 -0700 Subject: Re: Mail processing tool > Incoming from Jonas J Linde: > > And [EMAIL PROTECTED] spoke unto the world. And said: > > > I need a tool that does the following wor

Re: Mail processing tool

2004-01-25 Thread Jonas J Linde
And [EMAIL PROTECTED] spoke unto the world. And said: > From: "s. keeling" <[EMAIL PROTECTED]> >> Incoming from Jonas J Linde: >> > And [EMAIL PROTECTED] spoke unto the world. And said: >> > > I need a tool that does the following work: >> > > checks for new mail in a maibox via pop3; >> ... >> pro

Re: Mail processing tool

2004-01-25 Thread Florent Rougon
Jonas J Linde <[EMAIL PROTECTED]> wrote: >> Procmail is a big tool, I need something different: small, reliable, >> secure. > > Big? The gzipped source tar ball is 227kB. If you want something that > processes mail in a fully customizable way I'm pretty sure you won't find > anything much smalle

Re: Mail processing tool

2004-01-25 Thread Rick Moen
Quoting Jonas J Linde ([EMAIL PROTECTED]): > Never had any trouble with fetchmail except if setup badly; eg. with > different programs accessing the same mail box but using different > locking schemes. Fetchmail's a useful tool, but it does require running a local MTA as an inherent part of its d

Re: Mail processing tool

2004-01-25 Thread Adeodato Simó
* Rick Moen [Sun, 25 Jan 2004 17:41:11 -0800]: > Fetchmail's a useful tool, but it does require running a local MTA as an > inherent part of its design. (It does that instead of, itself, having > code to support mail stores.) $ apt-cache show fetchmail | grep -i suggests $ man fetchmail

Re: Mail processing tool

2004-01-25 Thread Rick Moen
Quoting Adeodato Simó ([EMAIL PROTECTED]): > Am I missing something? http://www.catb.org/~esr/fetchmail/ includes: "Fetchmail retrieves mail from remote mail servers and forwards it via SMTP" -- Cheers, Rick Moen "vi is my shepherd; I shall not font." [EMAIL PROT

Re: Mail processing tool

2004-01-25 Thread Adeodato Simó
* Rick Moen [Sun, 25 Jan 2004 17:53:58 -0800]: > Quoting Adeodato Simó ([EMAIL PROTECTED]): > > Am I missing something? > http://www.catb.org/~esr/fetchmail/ includes: >"Fetchmail retrieves mail from remote mail servers and forwards it >via SMTP" fetchmail(1) includes: -

Re: Mail processing tool

2004-01-25 Thread Rick Moen
Quoting Adeodato Simó ([EMAIL PROTECTED]): > fetchmail(1) includes: > >-m | --mda > (Keyword: mda) You can force mail to be passed to an MDA > directly (rather than forwarded to port 25) with the --mda or -m > option. To avoid losin

Re: Mail processing tool

2004-01-25 Thread Tristan Mills
On Sun, Jan 25, 2004 at 05:41:11PM -0800, Rick Moen wrote: > Quoting Jonas J Linde ([EMAIL PROTECTED]): > > > Never had any trouble with fetchmail except if setup badly; eg. with > > different programs accessing the same mail box but using different > > locking schemes. > > Fetchmail's a useful t

Re: Mail processing tool

2004-01-25 Thread Raffaele D'Elia
-Original Message- From: Florent Rougon <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Date: Sun, 25 Jan 2004 23:00:36 +0100 Subject: Re: Mail processing tool > Jonas J Linde <[EMAIL PROTECTED]> wrote: > > >> Procmail is a big tool, I need something different: small, reliable, > >> secure.