[Spambayes] [ spambayes-Patches-697970 ] pop3proxy didn't use addressAndPort for uiPort

SourceForge.net noreply at sourceforge.net
Wed Mar 5 07:25:45 EST 2003


Patches item #697970, was opened at 2003-03-05 07:09
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498105&aid=697970&group_id=61702

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Wolfgang Strobl (strobl)
Assigned to: Nobody/Anonymous (nobody)
Summary: pop3proxy didn't use addressAndPort for uiPort

Initial Comment:
pop3proxy doesn't accept the hostname:portno notation 
for the -l (i.e. uiPort) flag. I did'nt like everybody on our 
LAN being able to read my mail using a webbrowser, so 
I wrote the attached path, this allows -l localhost:8880


----------------------------------------------------------------------

>Comment By: Tim Stone (timstone4)
Date: 2003-03-05 09:25

Message:
Logged In: YES 
user_id=645698

You bring up a very good point, Wolfgang.  Your patch plugs one hole, but 
someone can still access your mail via http://<yourip>:8880 (or 
whatever port you happen to be listening on).  This is a problem, and I think 
the solution is to implement http auth...  We can't just reject connections 
that don't originate from localhost, because someone really might want 
to use another computer to access the pop3proxy ui.

----------------------------------------------------------------------

Comment By: Richie Hindle (richiehindle)
Date: 2003-03-05 08:38

Message:
Logged In: YES 
user_id=85414

Unless I'm misunderstanding something, this is exactly
what the html_ui_allow_remote_connections setting is for...?

Thanks for the patch anyway - there's nothing wrong with
being able to specify the address that way whether
html_ui_allow_remote_connections solves your problem
or not.


----------------------------------------------------------------------

Comment By: Wolfgang Strobl (strobl)
Date: 2003-03-05 07:36

Message:
Logged In: YES 
user_id=311771

ahem. Make that ".. this allows -u localhost:8880", of course

----------------------------------------------------------------------

Comment By: Wolfgang Strobl (strobl)
Date: 2003-03-05 07:10

Message:
Logged In: YES 
user_id=311771

Forgot the checkmark, as usual. arrggg.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498105&aid=697970&group_id=61702



More information about the Spambayes mailing list