Re: tmda-ofmipd + TLS made simpler

On Jan 17, 2007, at 5:36 PM, Stephen Warren wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Amitai Schlair wrote:
>> I've been happily using tmda-ofmipd wrapped with stunnel on port
>> 465 (SMTPS) for quite some time. Upon noticing and reading through
>> the ofmipd-stunnel-xinetd example in the TMDA distribution, I
>> decided to also support TLS on port 587. In my case, it turned out
>> to be quite a bit simpler than the example, so I wanted to report
>> on my findings here.
>>
>> Given:
>> * a long-running tmda-ofmipd on localhost:8025
>> * a long-running stunnel on port 465 hooked up to tmda-ofmipd
>
> The purpose of the wrapper scripts etc. was:
>
> 1) To allow tmda-ofmipd to see the real client IP address (via the
> environment variables that stunnel sets up), rather than simply
> reporting all connections as being from localhost.

Ah! I didn't realize that. Definitely worth a mention in ofmipd- 
stunnel-xinetd/README.txt.