Michael Middleton,
Do you fall into this category?  I don't use IMGate and did not use any BCCs
on my message.

Todd

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ron Hornbaker
Sent: Friday, February 15, 2002 12:00 PM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] More X-RCPT-TO privacy issues (was: wierd
messages...)


You know what's even weirder, is the X-RCPT-TO header of ALL the IMail
Forum list messages sent to me (just noticed it now):

 X-RCPT-TO: <[EMAIL PROTECTED]>

Why's that weird? Jeff works for me. He's subscribed to this list too. My
email address ([EMAIL PROTECTED]) is nowhere to be found in the headers.

I suspect this is the same basic flaw as the BCC bug in IMail discussed
here a couple of weeks ago, where IMail writes the FIRST of a list of
RCPT-TO recipients to the header of each message to all blind recipients.

We are using IMGate on the front end... could it be involved, Len?

Moral of the story: if you're using IMail (v7 for sure, v6 probably), and
someone sends mail from outside your server with a BCC to more than one
recipient on the same domain on your server, under certain circumstances
each of the BCC recipients can see the *first* BCC recipient in the header
of the message.

Ron Hornbaker

 - http://humankindsystems.com - 2,416 admins can't be wrong
 - http://AnswerTrack.com - eCRM email tracking & routing
 - http://KillerWebMail.com - the name says it all
 - Buy IMail from us, get KillerWebMail FREE!
 - 1-888-952-4888 or [EMAIL PROTECTED]




Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to