Great Circle Associates Firewalls
(February 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Connecting to a pop mail server via firewall
From: David Miller <isdmill @ gatekeeper . ddp . state . me . us>
Date: Thu, 16 Feb 1995 08:32:47 -0500 (EST)
To: "NORSE::SMALL_DO" <SMALL_DO%NORSE . decnet @ gate . hosp . ohio-state . edu>
Cc: firewalls <firewalls @ greatcircle . com>
In-reply-to: <199502152028 . MAA19388 @ mycroft . GreatCircle . COM>

On 15 Feb 1995, NORSE::SMALL_DO wrote:

> Hi:
> 	I haven't seen this discussed here before and I have had some
> requests from users who want to connect to a pop mail server that is
> on the untrusted side of our firewall.  Are there any proxy servers 
> available for pop mail?  What implications would there be in opening up 
> ports 109 (pop2) or 110 (pop3) on the firewall and routing the packets
> through?  Is this even possible?  One concern would possibly be with 
> address spoofing I suppose but I believe we have that covered with the
> router (on the untrusted side) not allowing source routing.  Am I wrong?
> Any help would be much appreciated.
> 
> 
> 				=Doug Small
> 
> Doug Small:       The Ohio State University Medical Center 
>     small_do @
 gate .
 hosp .
 ohio-state .
 edu           Work: (614) 293-3860   


Doesn't POP use cleartext passwords to authenticate users?  If so, this 
sounds like a really bad idea, since anyone sniffing things would then 
have a userid, password, and at least the ability to subvert mail.....


--- David
----------------------------------------------------------------------------
		It's *amazing* what one can accomplish when 
		    one doesn't know what one can't do!



Follow-Ups:
References:
Indexed By Date Previous: WAIS through a firewall
From: James_Jasinski @ hud . gov
Next: Re: Cisco access lists
From: sargent @ tusk . saic . com (Robert Sargent)
Indexed By Thread Previous: Connecting to a pop mail server via firewall
From: "NORSE::SMALL_DO" <SMALL_DO%NORSE . decnet @ gate . hosp . ohio-state . edu>
Next: Re: Connecting to a pop mail server via firewall
From: Ken Hardy <ken @ bridge . com>

Google
 
Search Internet Search www.greatcircle.com