Diff: ImapTunnelingOverSsh

Differences between version 9 and revision by previous author of ImapTunnelingOverSsh.

Other diffs: Previous Major Revision, Previous Revision

Newer page: version 9 Last edited on January 28, 2009 1:38 pm by PhilHollenback Revert
Older page: version 6 Last edited on August 3, 2004 10:43 am by 192.234.68.70 Revert
@@ -10,13 +10,12 @@
  
 The imap client you run has to include support for this. New versions 
 of mutt (like 1.3.19) have a tunnel variable you can set, for example: 
  
-set tunnel="ssh -q mail.example.com /usr/sbin/imapd" 
+;: set tunnel="ssh -q mail.example.com /usr/sbin/imapd" 
  
-;: To use with __Courier IMAP__, syntax is %%%  
-;: set tunnel="ssh -q mail.example.com /usr/sbin/imapd 2>/dev/null Maildir" %%%  
-;:(see MikeJamesWiki:GnusCourierImapSshSetup) --[MikeJames|MikeJamesWiki:]  
+To use with __Courier IMAP__, syntax is  
+;:set tunnel="ssh -q mail.example.com /usr/sbin/imapd 2>/dev/null Maildir" 
  
 ssh has to be able to log you in w/o asking for a password, so you 
 need to set up RSA or agent authentication first. However, if you 
 have that, then the imap connections become completely transparent and 
@@ -26,4 +25,33 @@
  
 pine has similar support. 
  
 --phil 6/14/01 
+  
+-----  
+  
+<?plugin RawHtml  
+<script>  
+var idcomments_acct = '011e5665a1128cdbe79c8077f0f04353';  
+var idcomments_post_id;  
+var idcomments_post_url;  
+</script>  
+<span id="IDCommentsPostTitle" style="display:none"></span>  
+<script type='text/javascript' src='http://www.intensedebate.com/js/genericCommentWrapperV2.js'></script>  
+?>  
+  
+-----  
+  
+<?plugin RawHtml  
+<center>  
+<script type="text/javascript"><!--  
+google_ad_client = "pub-5011581245921339";  
+google_ad_width = 728;  
+google_ad_height = 90;  
+google_ad_format = "728x90_as";  
+google_ad_channel ="";  
+google_ad_type = "text";  
+//--></script>  
+<script type="text/javascript" src="http://pagead2.googlesyndication.com/pagead/show_ads.js">  
+</script>  
+</center>  
+?>  

version 9

Secure IMAP over SSH Tunnels

I finally figured out how to securely run imap - do it over ssh.

Here's a good reference: unixreview article The trick is that the mail client runs some other program to tunnel to the imap server and run imapd there. When the imap server runs locally like that, it realizes that you are already an authenticated user, and doesn't ask you to log in again.

The imap client you run has to include support for this. New versions of mutt (like 1.3.19) have a tunnel variable you can set, for example:

set tunnel="ssh -q mail.example.com /usr/sbin/imapd"

To use with Courier IMAP, syntax is

set tunnel="ssh -q mail.example.com /usr/sbin/imapd 2>/dev/null Maildir"

ssh has to be able to log you in w/o asking for a password, so you need to set up RSA or agent authentication first. However, if you have that, then the imap connections become completely transparent and you mail client no longer asks for passwords!

Check the mutt sourceforge site for a few more notes. Pay attention to the part about setting timeout and mail_check.

pine has similar support.

--phil 6/14/01





Our Founder
ToolboxClick to hide/show