o:[EMAIL PROTECTED]
>Subject: [xmail] Re: Might be A Bug [Part II]
>
>
>I had made EHLO mandatory in the XMail server by
>commenting the code which acknowledges the "HELO"
>command,hence the only command that is accepeted by
>the email server is "EHLO&quo
it won't take your test message without
> authentication then try your
> test again with authentication and post the results.
>
> Bill
>
> >--
> >From:V=EB=E9r=EAsh" =
> "Kh=E5n=F6rk=E3r[SMTP:[EMAIL PROTECTED]]
> >Sent:Wednesday, May
x27;t take your test message without authentication then try your
test again with authentication and post the results.
Bill
>--
>From: V=EB=E9r=EAsh" =
"Kh=E5n=F6rk=E3r[SMTP:[EMAIL PROTECTED]]
>Sent: Wednesday, May 01, 2002 1:17 AM
>To:[EMAIL PROTECTED]
>Subject
Agreed if the session is in non-authenticated state
then the user should not be allowed to send mail and
thats what is exactly happening. In such case any user
who knows this failure in authentication but still
maildelivery can give rise to spam, dont you think so?
I mean if the authentication i
Another dump check it out:
The underlined command shouldnt be allowed IMHO. Check
it out:
After the user has given EHLO, the user is supposed to
give AUTH, but in the below case if the user gives
_MAIL FROM_ its still accepted. Isnt it a security
lapse?
Please do reply back.
Veeresh
-
