>> VOPmail does not check the actual account, only the domain.
>> This is not a bug but by design as checking the existence
>> of the actual account is next to worthless since almost
>> all domains have a postmaster account.
Call it what you want, bug or feature, this problem will get you banned on
every RBL if your relay is tested. Vircom should close this Spam hole and
for some reason is arguing that you need this feature. You don't. If the
from line is incomplete, it should reject the email, period.
- Steve
-----Original Message-----
From: Benjamin S. Rogers [mailto:[EMAIL PROTECTED]]
Sent: Monday, November 13, 2000 4:47 AM
To: CF-Talk
Subject: RE: Mail Servers
> Vopmail still has a problem with from lines of just a name and no domain.
> Vopmail assumes the sender must be from the default domain and the server
> and then will let it relay. That is a definite no-no. Thus it is very hard
> to get VOPMail off the spam block lists.
Oddly enough, this just went through the VOPmail list. Indeed, VOPmail does
not check the actual account, only the domain. This is not a bug but by
design as checking the existence of the actual account is next to worthless
since almost all domains have a postmaster account. Even if the domain does
not have a postmaster account, a DNS lookup should reveal one or more
accounts.
> Vircom has been aware of the problem for some time, yet they have been
> unwilling to do anything about it.
Actually, they've been busy working on features that will actually have some
benefit, such as preventing spam without disrupting service.
> I too have strongly recommended Vircom's
> VOPMail in the past. But this recent discovery of a spam hole and lack of
a
> fix from Vircom over a known spam hole makes me question my past
> recommendations.
Actually, even the RBLs call VOPmail a "Best of Breed" product when it comes
to anti-relay/anti-spam functionality:
http://maps.vix.com/tsi/ar-fix.html#vopmail
Benjamin S. Rogers
Web Developer, c4.net
voice: (508) 240-0051
fax: (508) 240-0057
----------------------------------------------------------------------------
--------------------
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists or send a
message with 'unsubscribe' in the body to [EMAIL PROTECTED]
------------------------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists or send a message
with 'unsubscribe' in the body to [EMAIL PROTECTED]
