Openwall Project   /home  Owl  JtR  Pro  crypt  pam_passwdqc  tcb  phpass  scanlogd  popa3d  msulogin  /  Linux  BIND  /  advisories  presentations  /  services  donations  /  wordlists  passwords  /  community  lists  wiki  CVSweb  mirrors  signatures
bringing security into open environments
 
This website is powered by Openwall GNU/*/Linux security-enhanced OS
[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]
Date: Tue, 15 Apr 2003 19:36:01 +0400
From: Solar Designer <solar@...nwall.com>
To: popa3d-users@...ts.openwall.com
Subject: Re: popa3d syslogs / sendmail POP-before-SMTP

On Tue, Apr 15, 2003 at 09:35:57AM +0200, Torgny Bjers wrote:
> I recently fired up my Sendmail server, and I have been toying with 
> POP-before-SMTP. I downloaded poprelayd for sendmail 
> (http://poprelay.sourceforge.net/) that checks the maillog log file for 
> successful pop3 logins. This doesn't seem to work all that well with popa3d 
> since it stores its log entries in at least two different logs (Slackware 
> 9.0) which is 'secure' and 'messages'.  What the script needs is the 
> "Authenticated" and the IP entry on the same row.
> 
> I saw a note on the popa3d homepage about a whoson patch that would be the 
> preferred method to do POP-before-SMTP, which I looked at briefly, although 
> I could not derive too much from the patch itself.

You need to follow the link for whoson (off popa3d homepage).  There's
also now a newer whoson patch for popa3d 0.6.2/0.6.3.

> The other option would be for me to simply alter the log message sent to 
> syslog to include the IP, perhaps.  I'll try that as well.

popa3d-0.4-before-sendmail.tar.gz in contrib/ has a patch to do that.

-- 
/sd

Hosted by DataForce ISP - Powered by Openwall GNU/*/Linux