[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kmail-devel
Subject:    Re: adding timestamp to transmission completed statusbar message
From:       Marc Mutz <mutz () kde ! org>
Date:       2003-02-26 1:26:41
[Download RAW message or body]

On Monday 24 February 2003 12:32, Patrick S. Vogt wrote:
> On Sunday 23 February 2003 21:13, Marc Mutz wrote:
<snip>
> > Via SLP?
>
> Just installed openslp...
> thats related to the kroupware project, isn't it?

No, but other kdenetwork apps already use it, so it's not YALD (yet 
Another Library Dependency). It's an IETF standards track protocol that 
enables applications to find arbitrary service providers in a 
standardized fashion.

> I doubt that the networks I am connected to speak SLP...

Time to set one up ;-) Chance are that your network printers are already 
SLP-enabled.

> What I was thinking of is, to have the possibility to assign a
> network to a SMTP server entry in kmail and then have kmail check
> what IP address is used and decide according to the network which
> SMTP server to use.

Hackish. I'd prefer to have an extended profile management (easy 
switching of profiles, not via config dialog, editing and creation of 
new profiles) so one could bundle together more than just SMTP options.

> Perhaps even use MX records or scan the network
> for open SMTP ports.

Unacceptable. The message injection host ("smarthost") is not guaranteed 
to be the same as the one listed in the MX record for that domain. 
Scanning networks is not acceptable, even if the SMTP ports found would 
always correspond to smarthosts that were willing to accept mail from 
the local network. And even if you found a host that accepted mail from 
you, that would make KMail vulnerable to a trivial spoofing attack: 
Just open a local SMTP server on an arbitrary host on the network and 
watch all the mails that unfortunate KMails send to you in the belief 
that you are the legitimate smarthost (it doesn't matter that it's 
possible to use DNS spoofing to do the same thing; DNS spoofing is 
probably harder than to hookup a standard Linux install with SMTP 
server started...).

That leaves two options (which are not mutually exclusive):
1. Use SLP to find smarthost SMTP servers.
2. Extend profile management with user profile creation, modification 
and fast switching (toolbar button).

Marc

-- 
We do not believe it draws the proper balance in a democratic society
for the activities of government to be concealed from public scrutiny
while the private activities of citizens are made open to government.
       -- EPIC letter to the President of the EU Council of Ministers

[Attachment #3 (application/pgp-signature)]
_______________________________________________
KMail Developers mailing list
kmail@mail.kde.org
http://mail.kde.org/mailman/listinfo/kmail

[prev in list] [next in list] [prev in thread] [next in thread]