4.2-RC3 Mail checker & pop3 entry: missing port number

Brian J. Tarricone bjt23 at cornell.edu
Tue Dec 28 19:23:55 CET 2004


Rob Lahaye wrote:

>Hi,
>
>The mail checker allows this kind of entry:
>
>   pop3://user:password at server
>
>which works. However, using pop3 like this is risky,
>since it sends the password in clear text over the network.
>
>Instead, one should use a secure tunnel from the local machine
>to the server. Say, this tunnel operates on port 55110 with:
>
>   ssh -N -f -L 55110:server:110 my.local.host
>
>then the following should be allowed in the mailchecker:
>
>   pop3://user:password at localhost:55110
>
>Now adding such a port number at the end seems to break the
>mailchecker.
>
the attached patch doesn't actually work, but that's mainly because i 
apparently suck at sscanf() format strings.  if someone were to fix the 
format string, it should work.  i leave that as an exercise for the 
reader ^_~.

    -brian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mailcheck-port-number.diff
Type: text/x-patch
Size: 1458 bytes
Desc: not available
URL: <http://mail.xfce.org/pipermail/xfce4-dev/attachments/20041228/0693fd0c/attachment.bin>


More information about the Xfce4-dev mailing list