SecurityFocus

possible open relay hole in qmail-smtpd-auth patch Jul 15 2003 04:36PM
John Simpson (jms1 jms1 net) (2 replies)

Re: possible open relay hole in qmail-smtpd-auth patch Jul 16 2003 11:54AM
Uwe Ohse (uwe ohse de) (1 replies)

Re: possible open relay hole in qmail-smtpd-auth patch Jul 16 2003 08:48PM
Valdis Kletnieks vt edu (1 replies)

Re: possible open relay hole in qmail-smtpd-auth patch Jul 17 2003 12:12PM
Uwe Ohse (uwe ohse de)

On Wed, Jul 16, 2003 at 04:48:18PM -0400, Valdis.Kletnieks (at) vt (dot) edu [email concealed] wrote:

> Actually, it is *quite* legal to reply a '250 OK' on something that
> will eventually

the patch (qmail-1.03-jms1-antispam.patch) replies with 250, even though
it already knows that the message will _not_ reach the recipient and
will _not_ be bounced. It knows that the message is being sent to
/dev/null.

Sorry for being unclear.

Regards, Uwe

[ reply ]

Re: possible open relay hole in qmail-smtpd-auth patch Jul 16 2003 01:09AM
Jonathan de Boyne Pollard (J deBoynePollard tesco net)