On Mon, 2007-01-29 at 22:02 +0100, Magnus Holmgren wrote: > > Damn, you're right. I didn't expect that. I mean, Exim provides many hacks to > deal with broken servers, so I can't see why mailfrom shouldn't be available > to those who know what they're doing.
Anyone who really knows what they're doing wouldn't be trying to set a non-empty MAIL FROM:<> on a sender callout. It's a denial of service attack waiting to happen. The correct response for the OP is to get the admin of the offending broken mail server to fix it. Failing that, exempt it from callouts. -- dwmw2 -- ## List details at http://www.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://www.exim.org/eximwiki/
