Re: [vchkpw] possible smtp-auth bug (qmail)

2003-07-16 Thread Peter Palmreuther
Hi Bård, On Tue, 15 Jul 2003 20:51:24 +0200 Bård Tommy Nilsen wrote: > Ok, cause when i checked it through www.abuse.net it said that my server > was open for relay. Well, if I tell you you've to jump out the windows in 10th floor you're gonna jump? > <<< 250 martine.fjord-data.no > > To: [EM

Re: [vchkpw] possible smtp-auth bug (qmail)

2003-07-15 Thread Tom Collins
On Tuesday, July 15, 2003, at 04:55 AM, Bård Tommy Nilsen wrote: Sorry for starting the discussion. If I set up an script that generates mail from one adress in the rcpthost to Another adress in rcpthost I can fill every mailbox on the server ... I thought that smtp auth should prevent that anyo

Re: [vchkpw] possible smtp-auth bug (qmail)

2003-07-15 Thread Peter Palmreuther
Hi Bård, On Tue, 15 Jul 2003 13:55:34 +0200 Bård Tommy Nilsen wrote: [Quoting fixed, top posting is bad to read and reply] >>> When I tried to relay trough my test server with an to Address that >>> matched one domain in rcpthost it accepts the relay. >> Well ... what do you think 'rcpthosts' i

RE: [vchkpw] possible smtp-auth bug (qmail)

2003-07-15 Thread Bård Tommy Nilsen
Sorry for starting the discussion. If I set up an script that generates mail from one adress in the rcpthost to Another adress in rcpthost I can fill every mailbox on the server ... I thought that smtp auth should prevent that anyone could send messages through the Server without being authentic

Re: [vchkpw] possible smtp-auth bug (qmail)

2003-07-15 Thread Peter Palmreuther
Hi Bård, On Mon, 14 Jul 2003 21:10:09 +0200 Bård Tommy Nilsen wrote: > When I tried to relay trough my test server with an to > Address that matched one domain in rcpthost it accepts the relay. Well ... what do you think 'rcpthosts' is for? You have no idea? READ THE FU^HINE MANUAL! It would be

Re: [vchkpw] possible smtp-auth bug (qmail)

2003-07-14 Thread spork
On Mon, 14 Jul 2003, Alejandro Ortega Paez wrote: > It will be only from old versions of vpopmail. I'm using 5.3.20 and this test > does not work: The reason I posted is that even though it's an old issue, apparently now spammers are discovering it. If you follow the thread, it seems it's a (com

Re: [vchkpw] possible smtp-auth bug (qmail)

2003-07-14 Thread Tom Collins
On Monday, July 14, 2003, at 11:59 AM, Alejandro Ortega Paez wrote: It will be only from old versions of vpopmail. I'm using 5.3.20 and this test does not work: telnet 192.168.1.2 25 Trying 192.168.1.2... Connected to 192.168.1.2. Escape character is '^]'. 220 xx..xx ESMTP auth login 334 VXN

Re: [vchkpw] possible smtp-auth bug (qmail)

2003-07-14 Thread Alejandro Ortega Paez
El lun, 14-07-2003 a las 20:19, Charles Sprickman escribió: > Howdy, > > If you are running vpopmail with an smtp-auth patch, you might want to > look at this: > > http://marc.theaimsgroup.com/?l=qmail&m=105452174430616&w=2 > > Apparently one of the smtp-auth patches takes any old login/pass and