Re: newer check_spamhelo

2009-05-10 Thread Robert Spier
Ask Bjørn Hansen wrote: > > > On May 9, 2009, at 19:21, Charlie Brady wrote: > > > If the assertion that the existing old simple version is useless is > > correct, is there much justification for keeping the old simple > > version? > > > > This is really a namespace issue, I think. Should "che

Re: SMTP AUTH with PAM and CRAM-MD5

2009-05-10 Thread Kjetil Kjernsmo
On Sunday 10 May 2009, Charlie Brady wrote: > > So, it is simply not possible to use a password which is encrypted > > on the host with CRAM-MD5, or is there a workaround? > > Yes, it is not possible, and no, there is no workaround. OK, fair enough. > Why do you want to use CRAM-MD5? So, what I

Re: SMTP AUTH with PAM and CRAM-MD5

2009-05-10 Thread John Peacock
Kjetil Kjernsmo wrote: > So, what I actually want is just to encrypt the password. The email will > go unencrypted over the rest of the network anyway (unless I > PGP-encrypt it), so SSL seems like an unnecessary hassle and overhead > that I'd like to avoid. LOGIN and PLAIN are both freetext, ri

Re: newer check_spamhelo

2009-05-10 Thread Charlie Brady
On Sun, 10 May 2009, Robert Spier wrote: Ask Bjørn Hansen wrote: On May 9, 2009, at 19:21, Charlie Brady wrote: This is really a namespace issue, I think. Should "check_spamhelo" belong to an old simple ineffective plugin, or a newer, and presumably more useful, one? As much as it sucks t

Re: SMTP AUTH with PAM and CRAM-MD5

2009-05-10 Thread Chris Lewis
John Peacock wrote: 4) Change your startup script to also bind to port 465 (e.g. with forkserver add --port 465) FYI: With both port 25 and 587 you connect to in plaintext, and can "upshift" to SSL via STARTTLS command (if the server is configured for it). With port 465, the whole connect

Re: newer check_spamhelo

2009-05-10 Thread Chris Lewis
Charlie Brady wrote: http://markmail.org/message/sckrkzhtft34rqgg Does anyone have existing literal badhelo matches which might match a valid helo hostname if interpreted as an RE? This might be a good opportunity to introduce standardization into pattern matching plugins with common config

Re: SMTP AUTH with PAM and CRAM-MD5

2009-05-10 Thread John Peacock
Chris Lewis wrote: > With both port 25 and 587 you connect to in plaintext, and can "upshift" > to SSL via STARTTLS command (if the server is configured for it). > > With port 465, the whole connection is in SSL. > > Apparently the port 465 variant is deprecated in favor of 587/STARTTLS. Yeah, I

Re: SMTP AUTH with PAM and CRAM-MD5

2009-05-10 Thread Kjetil Kjernsmo
OK, thanks a lot, folks, I'll check it out and see what makes most sense. Cheers, Kjetil -- Kjetil Kjernsmo Programmer / Astrophysicist / Ski-orienteer / Orienteer / Mountaineer kje...@kjernsmo.net Homepage: http://www.kjetil.kjernsmo.net/ OpenPGP KeyID: 6A6A0BBC