>Brian,
>I believe you are talking about the perl script that Ipswitch uses for 
>their
>discussion forums. <??>
>
>imailsrv2.pl
>This is the newly updated version of imailsrv.pl - a perl script which
>allows users to subscribe to a list via a html form. This new version sends
>the subscriber an e-mail which they must reply to before they are 
>subscribed
>to the list. This extra step prevents people from subscribing or
>unsubscribing other people without their consent.


Well that is the way that I subscribed to this list so maybe that is what I 
saw, but as most mail clients allow users to change their from addresses to 
anything they want - you can subscribe anybody via a mail client with very 
little effort ( or make a program that could subscribe people in bulk 
without their knowledge -- and without any validity check on the address).

I find this lack of security/privacy feature in the list server of this well 
regarded mail server somewhat shocking. It must leave lists on its list 
server open to abuse and spamming and must be a hole for DoS attacks on the 
mail server.


_____________________________________________________________________________________
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to