Re: SMTP SASL authentication plugin?

(No need to reply to me directly, thanks.)

On Sat, Apr 2, 2011 at 8:35 PM, Emmanuel Dreyfus <[email protected]> wrote:
> Paul Lesniewski <[email protected]> wrote:
>
>> Note that there is a plugin for SquirrelMail that does this too.  See:
>> http://squirrelmail.org/plugin_view.php?id=213
>
> The problem with that approach is that it misses the situation where the
> attacker would send both using webmail and direct SMTP.

Yes, per the plugin's description:

"Please note that this plugin is a poor replacement for real SMTP
filtering, which provides the same functionality no matter what email
client your users are using (it will also be much faster). This plugin
will work ONLY for email sent using SquirrelMail."

The plugin is most useful if sending directly via SMTP is disabled or
differently protected.

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Create and publish websites with WebMatrix
Use the most popular FREE web apps or write code yourself; 
WebMatrix provides all the features you need to develop and 
publish your website. http://p.sf.net/sfu/ms-webmatrix-sf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel