Hi Nico,

> I'm still testing neomail for using it.
> Now I detect an hole in it:
> 
> When I have several domains of our cusumours on one
> Raq the User [EMAIL PROTECTED] could log in at
> www.test2.com/neomail an could send mails from the Domain.
> 
> Is there any posibility to stop that ?

Although I can understand you concern, I do not agree.
Anyone could install a mailclient on their PC and enter [EMAIL PROTECTED] 
as their e-mail address. Is that a security issue ? I don't think so...

I am thinking about adding a control panel to neomail to configure this (allow 
or disallow), but I don't have much time at the moment, and I don't feel it is a 
serious issue.

With regards,

Taco Scargo

Professional Services Manager, EMEA

Sun Microsystems                Tel. +31 (71) 565 7021
Sun Cobalt Server Appliances    [EMAIL PROTECTED]

_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security

Reply via email to