Has IPSwitch said anything about releasing patch or update for this NUL address sender
problem? Having an "only moderator can post" list that accepts and posts messages
from anyone sending from a NUL address is a MAJOR SECURITY HOLE! Also can a NUL
sender also post to "only subscribers can post" lists? (I would assume so if a NUL
sender can post on "moderator only" lists.)
-jack
At 07:34 AM 5/25/99 -0500, you wrote:
>Yes, a blank address. Also referred to as NUL. Until I can figure
>something else out I have disabled NUL recipients in SMTP
>Security. This is not acceptable though as most MTA's will
>send their delivery failures from a NUL address.
>
>Dusty
>
>----- Original Message -----
>From: Jack Davis <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Tuesday, May 25, 1999 12:39 AM
>Subject: Re: [IMail Forum] Blocking GeoList Attacks
>
>
>> Hi Dusty,
>>
>> I just picked up the last few messages on this subject. When you say "a
>message from a NUL address" do you mean an empty "Reply To" address (or
>something else)? I'm trying to reproduce this here with a dummy email list
>we have set up in house for testing.
>>
>> Thanks,
>> Jack Davis
>>
>>
>>
>> At 09:46 PM 5/24/99 -0500, you wrote:
>> >Let's say you have a list set up for posting by a moderator only.
>> >No password on the moderator option set. If they send a message
>> >from a NUL address to this list it will go to all users on the list.
>> >
>> >Believe me. It happens and it is not pretty. Try explaining to
>> >all your users why your list sent them a SPAM.
>> >
>> >Dusty
>> >
>> >----- Original Message -----
>> >From: Rob Cartaino <[EMAIL PROTECTED]>
>> >To: <[EMAIL PROTECTED]>
>> >Sent: Thursday, June 24, 1999 9:15 PM
>> >Subject: Re: [IMail Forum] Blocking GeoList Attacks
>> >
>> >
>> >> What do you mean by "hit a moderator only list?"
>> >>
>> >
>> >
>>
>>
>
