This was taken straight from the www.orbs.org site. http://www.orbs.org/otherresources.html
 
"Qmail admins: Qmail's current version is insecure by default. Most admins know enough to follow the instructions for securing it before putting qmail into service, however it usually drops ORBS test messages checking for UUCP pathing vulnerabilities - "! pathing" - into the admin mailbox. As ! is a standard network addressing indicator, this can only be charitably described as yet another Qmail bug. Qmail is extremely network unfriendly and has been known to cause effective denial of service attacks on other mailservers in its enthusiasm to deliver as many messages as possible in a short period of time. For this reason it is best reserved for mailing list server purposes only. "
 
 

Reply via email to