Re: mailfront on IPv6

--bcaec547ca331c96b304a6d0248b
Content-Type: text/plain; charset=ISO-8859-1

On Tue, Jun 28, 2011 at 9:22 PM, Bruce Guenter <[email protected]> wrote:

> On Wed, Jun 22, 2011 at 10:39:10PM -0400, Scott Gifford wrote:
> > I have a version of my ucspitls patch for mailfront 0.96, and will
> probably
> > update it for the newer version sometime soon.  It doesn't fit neatly
> into
> > the plugin architecture, but is still fairly clean.
>
> On the subject of the patch itself, does there exist any helper programs
> that could be forked from mailfront only when TLS is requested?  While I
> agree on the idea of doing the TLS interpretation out-of-process, I
> don't particularly like the idea of each instance having to carry around
> an additional process no matter if TLS is requested or not.
>

That is probably possible, but one of the security mechanisms I use in
sslserver is chroot and switching to an otherwise unused UID, both of which
are only possible to root.  Providing the same security starting the process
afterwards would require a setuid root program, or for some kind of root
credentials to be maintained in order to start up this separate process.  I
guess it could be done with a separate SSL server and file-descriptor
passing, but I'm not sure that could be easily shoehorned into sslserver.

Because sslserver implements the functionality of tcpserver plus SSL, it
doesn't really carry around an extra process, it just carries around a copy
of tcpserver that has some extra libraries loaded to provide SSL.  I haven't
measured it, but I suspect the per-process overhead of this is pretty small.

-----Scott.

--bcaec547ca331c96b304a6d0248b
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Tue, Jun 28, 2011 at 9:22 PM, Bruce Guenter <span dir=3D"ltr">&lt;<a hre=
f=3D"mailto:[email protected]">[email protected]</a>&gt;</span> wrote=
:<br><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" style=3D"=
margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">

<div class=3D"im">On Wed, Jun 22, 2011 at 10:39:10PM -0400, Scott Gifford w=
rote:<br>
</div><div class=3D"im">&gt; I have a version of my ucspitls patch for mail=
front 0.96, and will probably<br>
&gt; update it for the newer version sometime soon. =A0It doesn&#39;t fit n=
eatly into<br>
&gt; the plugin architecture, but is still fairly clean.<br>
<br>
</div>On the subject of the patch itself, does there exist any helper progr=
ams<br>
that could be forked from mailfront only when TLS is requested? =A0While I<=
br>
agree on the idea of doing the TLS interpretation out-of-process, I<br>
don&#39;t particularly like the idea of each instance having to carry aroun=
d<br>
an additional process no matter if TLS is requested or not.<br></blockquote=
><div><br></div><div>That is probably possible, but one of the security mec=
hanisms I use in sslserver is chroot and switching to an otherwise unused U=
ID, both of which are only possible to root. =A0Providing the same security=
 starting the process afterwards would require a setuid root program, or fo=
r some kind of root credentials to be maintained in order to start up this =
separate process. =A0I guess it could be done with a separate SSL server an=
d file-descriptor passing, but I&#39;m not sure that could be easily shoeho=
rned into sslserver.</div>

<div><br></div><div>Because sslserver implements the functionality of tcpse=
rver plus SSL, it doesn&#39;t really carry around an extra process, it just=
 carries around a copy of tcpserver that has some extra libraries loaded to=
 provide SSL. =A0I haven&#39;t measured it, but I suspect the per-process o=
verhead of this is pretty small.</div>

<div><br></div><div>-----Scott.</div><div><br></div></div>

--bcaec547ca331c96b304a6d0248b--