[svlug] Secure POP3 installation - localhost

Alvin Oga alvin at planet.fef.com
Wed Aug 8 23:40:01 PDT 2001


hi ya...

whats the point of localhost using pop3???

you are already on your server that has access to /var/spool/mail...
use pine, elm, mutt on that machine...
( no need for pop3/imap...nothing...

why create a security hole for no particular purpose ???
( think netscape email wont broadcast passwd on the wire
( if its getting email from itself... if it does broadcast...
( another ding for netscape..

c ya
alvin

> Eric Pretorious wrote:
 
...
> e.g., run POP3 through inetd on the machine in question and establish the 
> rule that POP3 connections are only to come from 'localhost'? That sounds 
> good!
> 




More information about the svlug mailing list