missed that the new version is out and fixes the issue.  I'll test and
report back.  Thanks for the quick work!!

On Sat, Oct 24, 2009 at 8:25 PM, K Post <[email protected]> wrote:
> Fritz,
> That's what I'm saying.
>
> Only the envelope-sender is added/compared to the whitelist 
> (NotGreedyWhitelist)
> Normal operation includes addresses in the FROM, SENDER, REPLY-TO,
> ERRORS-TO, or LIST-* header fields.
> This allows nearly all list email to be whitelisted. Check this option
> to disable this. Will not do anything if you add/remove whitelist
> entries via email-interface
>
> I've got this unchecked, so shouldn't an email with a whitelisted
> address that appears in the FROM line, but not the MAIL FROM, act as a
> whitelisted sender?  Unless I've lost my mind (which is debatable),
> this is the way it worked in 1.3x.  Now that we've made the jump to
> v2, I can't see this behavior having been intentionally changed.
>
> I can confirm that with our installation, if [email protected] is
> whitelisted and [email protected] is in the from line but the
> mail from is [email protected], the email is NOT
> whitelisted.
>
> It's definitely a big problem here and I don't know why it's
> happening.  I don't know how many versions back this has been
> happening with, I just noticed it.
>
>
> On Sat, Oct 24, 2009 at 4:31 PM, Fritz Borgstedt <[email protected]> wrote:
>> ASSP development mailing list <[email protected]>
>> schreibt:
>> >From is too easy to
>>>spoof to use in a test, unless you are blocking a know from address
>>>that abuses your system.
>>
>>
>> That is correct, however ASSP DOES have an option (NotGreedyWhitelist)
>> to whitelist/check based on
>> from|sender|reply-to|errors-to|list-
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Come build with us! The BlackBerry(R) Developer Conference in SF, CA
>> is the only developer event you need to attend this year. Jumpstart your
>> developing skills, take BlackBerry mobile applications to market and stay
>> ahead of the curve. Join us from November 9 - 12, 2009. Register now!
>> http://p.sf.net/sfu/devconference
>> _______________________________________________
>> Assp-test mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/assp-test
>>
>

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to