Re: OT: Why are my servers strong passwords compromised

2009-07-19 Thread Charles Sprickman
On Sat, 18 Jul 2009, Damian Myerscough wrote: Hello, Just out of curiosity how do you let your users change their passwords? There's a few routes, since vpopmail basically stores everything in a database: -a squirrelmail plugin -a standalone php page -Freeside's account management page -"p

Re: OT: Why are my servers strong passwords compromised

2009-07-18 Thread Scott Haneda
On Jul 18, 2009, at 4:38 AM, Damian Myerscough wrote: Hello, Just out of curiosity how do you let your users change their passwords? Adding to this, do you have a forgot password feature that perhaps gives them passwords to a master control panel of some form? Did you distribute their

Re: OT: Why are my servers strong passwords compromised

2009-07-18 Thread Damian Myerscough
Hello, Just out of curiosity how do you let your users change their passwords? 2009/7/18 Charles Sprickman : > On Sat, 18 Jul 2009, ram wrote: > >> We run smtp services for our clients using smtp-auth. And nowadays we >> also enforce a strong password (minimum alphanumeric) >> But still people's

Re: OT: Why are my servers strong passwords compromised

2009-07-18 Thread Charles Sprickman
On Sat, 18 Jul 2009, ram wrote: We run smtp services for our clients using smtp-auth. And nowadays we also enforce a strong password (minimum alphanumeric) But still people's passwords get compromised. Even a relatively strong password. To save our postfix servers I have implemented rate-limits

Re: OT: Why are my servers strong passwords compromised

2009-07-17 Thread Michael Tokarev
ram wrote: Sorry for this OT post .. but I think this is a common problem for all postfix admins We run smtp services for our clients using smtp-auth. And nowadays we also enforce a strong password (minimum alphanumeric) But still people's passwords get compromised. Even a relatively strong pass

OT: Why are my servers strong passwords compromised

2009-07-17 Thread ram
Sorry for this OT post .. but I think this is a common problem for all postfix admins We run smtp services for our clients using smtp-auth. And nowadays we also enforce a strong password (minimum alphanumeric) But still people's passwords get compromised. Even a relatively strong password. To save