==================================================================
  Please DO NOT REPLY to this mail or send email to the developers
  about this bug. Please follow-up to Bugzilla using this link:
    http://bugs.contribs.org/show_bug.cgi?id=8609

  Have you checked the Frequently Asked Questions (FAQ)?
    http://wiki.contribs.org/SME_Server:Documentation:FAQ

  Please also take the time to read the following useful guide:
    http://www.chiark.greenend.org.uk/~sgtatham/bugs.html
==================================================================

--- Comment #6 from John Crisp <[email protected]> ---
OK, couple of things.

First, as logs aren't kept for very long before being rotated, I missed copying
them so need to try and renact the situation somehow.

Next, as I have discovered, adding your own domain to whitelistsenders is a
VERY bad idea and allows anyone impersonating you to send mail. Should be a
check to ensure that this does not happen.

e.g. if whitelistsender = server "DomainName" tell user they are criminally
insane....

I can add a patch for this to add wording to the server panel, and a check in
the expand-template whtelistsenders too.


FYI

db configuration show qpsmtpd
qpsmtpd=service
    BadCountries=
    Bcc=disabled
    BccMode=off
    BccUser=maillog
    DNSBL=enabled
    GeoIP=enabled
    LogLevel=8
    MaxScannerSize=25000000
   
RBLList=bl.spamcop.net:dnsbl-1.uceprotect.net:dnsbl-2.uceprotect.net:psbl.surriel.com:zen.spamhaus.org
    RHSBL=enabled
    RelayRequiresAuth=enabled
    SBLList=multi.surbl.org:rhsbl.sorbs.net
    TlsBeforeAuth=1
    access=public
    qplogsumm=enabled
    status=enabled

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
_______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at http://lists.contribs.org/mailman/public/contribteam/

Reply via email to