LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 05-28-2004, 02:19 AM   #1
Bjorkli
Member
 
Registered: Jul 2003
Location: Norway
Posts: 65

Rep: Reputation: 15
Does it exist a secure POP or IMAP or SSH that can be used by outlook express?


Hi. I have set up sendmail to work, but I use it only through local network, or openssh (putty). And I am a bit paranoid about security, and heard POP send the username / password as plain text, making it as insecure as ftp and telnet, and vulrunable for sniffers. And once they have the username / password they can simply log into the machine using ssh, install some root password finding software, and then my machine is screwed... Right?

But now my brother wants to use the domain name / mail server (lives in different town, and uses MS Outlook Express, so I guess it must be pop or IMAP then?). Does it exist something that I can add to sendmail to make it as secure as ssh and putty, but still so fleksible that my family can easly install it on their windows computers .(and not cost a thing )

I read from these forums that Qmail is suppose to be the secure mail application, but does it encrypt username / password? Will it be the weak link of my system? (only have port 80 (web) and port 22 (ssh) open).

Can I install putty on their machines, and somehow "tunnel" the mail information to MS outlook using ssh?

Or is my best bet to get a old retired machine from work or something, and set it up with linux and qmail, and seperate it from my main linux machine thourgh a local firewall (Guess this would be best, but my partner will kill me if I drag another rusty machine in the house).

Any suggestions?

Last edited by Bjorkli; 05-28-2004 at 02:22 AM.
 
Old 05-28-2004, 03:08 AM   #2
MS3FGX
Guru
 
Registered: Jan 2004
Location: NJ, USA
Distribution: Slackware, Debian
Posts: 5,852

Rep: Reputation: 351Reputation: 351Reputation: 351Reputation: 351
Quote:
Hi. I have set up sendmail to work, but I use it only through local network, or openssh (putty). And I am a bit paranoid about security, and heard POP send the username / password as plain text, making it as insecure as ftp and telnet, and vulnerable for sniffers
SSH sends the username and password in plain text (sort of) as well. Download "Ettercap" run it on your LAN, and login to your machine with SSH. Ettercap will sniff the username and password from the network instantly.

Ironically, your brother isn't a security concern, since you can't "sniff" the internet. He could send his username and password to your server in plain text, and it would be completely secure. The only place it could be sniffed is on your network or his. Which would require either his machine or your server to already be compromised (or at least a machine on either network). If this is the case (hijacked machines on the LAN) usernames and passwords are the least of your concerns.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
using Global signature through IMAP server and Outlook Express coolamit78 Linux - Networking 2 04-07-2006 09:26 AM
outlook express +squid dolreich_c Linux - Networking 1 04-07-2005 05:39 PM
Outlook Express to Thunderbird! ImpactDNI Linux - Software 2 08-30-2004 05:05 PM
Outlook Express? glyndwr Linux - Newbie 5 07-07-2004 08:16 AM
Outlook Express 6 (beta) php General 3 08-11-2001 07:43 AM


All times are GMT -5. The time now is 04:04 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration