Philippe Schelté wrote: > Hello, > > I use the LDAP user verification, it works well but seems that it can be > bypassed bye a "|" at the first letter place, I know this is seally > because it must be a valid email address that must follow the "|". > > example : > > I have a valid address : [EMAIL PROTECTED] > if a spammer sends a spam to : |[EMAIL PROTECTED] > assp will check [EMAIL PROTECTED] in the LDAP directory so it will > validate it. the spam will be detected and will fall in my spam-bin > mailbox instead of beiing rejected at the first time.
I've been getting the same spam messages and they ahve not have gotten past my LDAP lookups. Kevin ------------------------------------------------------------------------- SF.Net email is sponsored by: The Future of Linux Business White Paper from Novell. From the desktop to the data center, Linux is going mainstream. Let it simplify your IT future. http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4 _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
