Stunnel config question

herehere_at_aussiemail.com.au
Date: 04/29/05


Date: 28 Apr 2005 16:08:51 -0700

hello,

I am farily new to Stunnel and SSL/SSH (via. PuTTY); I have few
questions if you don't mind.

I use QuickSilver, Tor and Privoxy along with Stunnel...Hopefully ;-)

Could you please look over my Stunnel.conf file and let me know what
you think.

Also, I have a few questions I posted at the bottom; thanks!

Here is my Stunnel.conf file:

debug = 7
output = log.txt
client = yes
options = all
RNDbytes = 1024
RNDfile = random.bfa
RNDoverwrite = yes
ciphers =+DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:DES-CBC3-SHA

[nntps]
accept = 119
connect = secure.news.easynews.com:563
delay = no

[PANTA_SMTP]
protocol = smtp
accept = 2526
connect = www.panta-rhei.dyndns.org:465
delay = no

#[BANANA_SMTP]
#protocol = smtp
#accept = 2527
#connect = mail.bananasplit.info:2525
#delay = no

#[DINGO_SMTP]
#protocol = smtp
#accept = 2528
#connect = dingoremailer.com:2525
#delay = no

#[BANANA_NNTPS_563_SECURE_NEWS _FEED]
#accept = 119
#connect = tyrndfbdb2x6g3vg.onion:563
#delay = no

#[BANANA_SPLIT_25_SECURE_EMAIL ]
#accept = 25
#connect = tyrndfbdb2x6g3vg.onion:25
#delay = no

#[P...@HOTPOP.COM]
#accept = 25
#connect = pop.hotpop.com:110
#delay = no

1. What does this paramiter do and what effect does it have on stunnel?

ciphers =+DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:DES-CBC3-SHA

2. Which of these paramiters should I use:

RNDbytes = 1024
RNDfile = random.bfa

OR

RNDbytes = 2048
RNDfile = bananarand.bin

Thanks alot