Martin Lambers | 1 May 2012 18:30
Picon

msmtp 1.4.28 is released!

Hi all,

msmtp 1.4.28 is released!

This is a minor update that fixes two small problems and updates a part
of the documentation. See the ChangeLog for details.

Martin

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
grarpamp | 3 May 2012 10:42
Picon

Socks5 and msmtp

Hey all! Been using msmtp for a while, pretty cool :)

Now I'm in a new situation where having an option
to send ALL of msmtp's traffic via a SOCKSv5 server
would be immensely useful.

I check and grep entire source code for 'socks'
insensitive and there was no result :(

So I guess this is a formal request to add that. I'm not
sure if there is a ticket system to lodge enhancements?
I dont think it would be much work.

Note also in addition to TCP, DNS should be sent via
SOCKSv5 as well... at least in the form of connect
requests. This way there are NO traffic leaks of any kind
when using the SOCKSv5 runtime config option.

Seems a new option like:
--socksv5-host=host:port
would work fine. And the matching config file
statement would be needed as well.

Though v5 is more important initially (IPv4, IPv6, DNS), both
v4a and v5 could be implemented. Then use:
--socks-host=host:port
--socks-version=4a|5

With each definition in the config file able to use
either (version) or none (no proxy) as usual to other
(Continue reading)

grarpamp | 3 May 2012 10:54
Picon

manpage bug

Think of replace string 'ssmtp' with the correct IANA standard of 'smtps'.

Add reference to working with submission (port 587) should be made
somewhere too :)

http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xml

./ChangeLog:- Use getservbyname() to get the default port for smtp or ssmtp. Use
./ChangeLog:- tls_nostarttls now also changes the default port to 465 (ssmtp).
./NEWS:- The tls_nostarttls command now sets the default port to 465 (ssmtp).
./doc/msmtp.1:without STARTTLS is used, in which case it is "ssmtp"
(465). For LMTP, it is
./doc/msmtp.info:     STARTTLS is used, in which case it is "ssmtp"
(465). For LMTP, it
./doc/msmtp.info:   * Immediately. This is SMTP tunneled through TLS,
aka SSMTP. The
./doc/msmtp.info:     default port for this mode is 465 (ssmtp).
./doc/msmtp.texi:without STARTTLS is used, in which case it is "ssmtp"
(465). For LMTP, it is
./doc/msmtp.texi: <at> item Immediately. This is SMTP tunneled through TLS,
aka SSMTP. The default
./doc/msmtp.texi:port for this mode is 465 (ssmtp).
./src/msmtp.c:    /* start tls for ssmtp servers */
./src/msmtp.c:    /* start tls for ssmtp servers */
./src/msmtp.c:    /* start tls for ssmtp servers */
./src/msmtp.c:                se = getservbyname("ssmtp", NULL);
./src/smtp.h: * that use TLS without the STARTTLS command (service
ssmtp; default port 465),

------------------------------------------------------------------------------
(Continue reading)

grarpamp | 3 May 2012 11:24
Picon

Re: Socks5 and msmtp

One list subscriber, who shall remain anonymous, said in reply...
> "If you want to use Tor, just wrap torsocks around it. Works like a charm."

Bastardizing library calls with LD_PRELOAD only works
with dynamically compiled binaries. When your msmtp
or other app is statically compiled, it's useless.

LD_PRELOAD games are also subject to overloading
upon each other, require third party tools, and can
run up against API issues too I think.

Similar things can be said for chaining to msmtp external
proxy/socat-like tools regarding complexity/configuration.

A native implementation internal to msmtp is would be
better overall solution :)

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
Martin Lambers | 3 May 2012 18:46
Picon

Re: Socks5 and msmtp

On Thu, 3 May 2012 04:42:16 -0400, grarpamp wrote:
> Now I'm in a new situation where having an option
> to send ALL of msmtp's traffic via a SOCKSv5 server
> would be immensely useful.

A patch that makes this an optional feature would have a chance of
being accepted (if it does not introduce problems), but I will not
write it. You either have to find a volunteer or write it yourself.

Martin

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
Martin Lambers | 3 May 2012 18:44
Picon

Re: manpage bug

On Thu, 3 May 2012 04:54:35 -0400, grarpamp wrote:
> Think of replace string 'ssmtp' with the correct IANA standard of
> 'smtps'.

"ssmtp" refers to the /etc/services entry. It still says ssmtp on my
system, though smtps seems to be accepted as an alias. But I'm not sure
every /etc/services recognizes this.

> Add reference to working with submission (port 587) should be made
> somewhere too :)

A patch is welcome :)

Martin

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
grarpamp | 4 May 2012 19:38
Picon

Re: manpage bug

>> Think of replace string 'ssmtp' with the correct IANA standard of
>> 'smtps'.
>
> "ssmtp" refers to the /etc/services entry.

I know. I listed the canonical IANA source for everyone's /etc/services
rather than post mine too, it's more 'mine' agnostic that way, can't
argue with the source, only with out of date / divergent systems :)

> It still says ssmtp on my
> system, though smtps seems to be accepted as an alias.

Here's mine, which does not recognize ssmtp...

http://svnweb.freebsd.org/base/releng/9.0/etc/services?view=markup

> But I'm not sure every /etc/services recognizes this.

I would guess that given the standard,  smtps is more likely to
be used than ssmtp. As is the case with the rest of the entire
BSD world...

http://www.openbsd.org/cgi-bin/cvsweb/src/etc/services?rev=HEAD
http://cvsweb.netbsd.org/bsdweb.cgi/src/etc/services?rev=HEAD
http://gitweb.dragonflybsd.org/dragonfly.git/blob_plain/HEAD:/etc/services

Can't find the Debian repo online, I've little doubt it's the same.

------------------------------------------------------------------------------
Live Security Virtual Conference
(Continue reading)

Martin Lambers | 5 May 2012 07:58
Picon

Re: manpage bug

On Fri, 4 May 2012 13:38:01 -0400, grarpamp wrote:
> > It still says ssmtp on my
> > system, though smtps seems to be accepted as an alias.
> 
> Here's mine, which does not recognize ssmtp...
> 
> http://svnweb.freebsd.org/base/releng/9.0/etc/services?view=markup

OK, that's a good reason to switch to the new name. Patch is pushed.

I wonder why the BSD /etc/services does not support aliases. The
history of the file indicates that the service was called smtps for a
very long time, but so far no BSD user complained - maybe the alias
"ssmtp" is accepted through another mechanism on these systems?

Martin

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
grarpamp | 5 May 2012 10:12
Picon

Re: manpage bug

>> > It still says ssmtp on my
>> > system, though smtps seems to be accepted as an alias.
>>
>> Here's mine, which does not recognize ssmtp...
>>
>> http://svnweb.freebsd.org/base/releng/9.0/etc/services?view=markup
>
> OK, that's a good reason to switch to the new name. Patch is pushed.

Cool.

> I wonder why the BSD /etc/services does not support aliases. The
> history of the file indicates that the service was called smtps for a
> very long time, but so far no BSD user complained - maybe the alias
> "ssmtp" is accepted through another mechanism on these systems?

You may find the /etc/services documentation here:
http://svnweb.freebsd.org/base/releng/9.0/share/man/man5/services.5?view=markup

BSD's do support aliases therein. There is just no such
alias defined out of the box:
telnet localhost ssmtp
localhost: servname not supported for ai_socktype

No complaints could be either user not using it, or defined
the alias themselves.

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
(Continue reading)

Keith Bowes | 4 May 2012 01:01
Picon
Gravatar

Re: manpage bug

Je 2012-05-03 je 18:44:08 (+0200) Martin Lambers skribis:
> "ssmtp" refers to the /etc/services entry. It still says ssmtp on my
> system, though smtps seems to be accepted as an alias. But I'm not sure
> every /etc/services recognizes this.
Mine has:
ssmtp		465/tcp		smtps		# SMTP over SSL
> 

--

-- 
Keith Bowes <http://zooplah.farvista.net/>

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

Gmane