Re: [IMail Forum] Blocking GeoList Attacks - Security Hole

[John A. Junod]

The problem has been reported and will be corrected in the
5.05 release.

John

In reply to 26 May message from [EMAIL PROTECTED]:

>I think the point was missed here.  This was not local users that 
>SPAMmed or sent NUL messages to the list.  The attack was a 
>dictionary attack which managed to send to the list from a NUL 
>address.

>When the dictionary was run on the machine the list name returned 
>as a valid username.  So when the SPAM was sent to that name, it
>went everywhere.

>Dusty