>if this is how he want to do business... without thought or consideration
>of others.... well... see ya!
>
>"It seems one of Gulliver's tests to validate whether a server is really
>an open relay or not was causing Lotus Domino machines to crash. One of 10
>or so e-mail tests routinely conducted, the code in one was causing Domino
>SMTP servers to enter an endless mail loop, consuming 100 percent of the
>CPU and putting it out of commission.
>
>Laura Atkins, newly installed president of the non-profit anti-spam outfit
>SpamCon Foundation, said the code changes needed to correct the bug was
>"trivial" but one Gulliver, for one reason or another, was unwilling to
>correct."
So it's OK for a Fortune 500 company not to take a few minutes to fix a
major security issue with their software, but a small organization that is
helping reduce the amount of unwanted material on the Internet (for free)
has to make changes to their software to bypass the flaw (which would only
prevent the DoS situation in some cases, not all)?
I'm surprised that ORBZ didn't work around this issue -- they really should
have check the SMTP greeting, and if it indicated a Lotus server, it should
have not run any tests, and automatically blacklisted the server. That is
the *only* feasible alternative to the Lotus problem, but that would also
punish anyone running Lotus who found a way to fix the problem (and would
punish anyone using a fixed version of Lotus).
It certainly makes Ipswitch look good, though; they are very quick to
release patches when security issues come up. They would never sit on a
DoS attack for 6 months!
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
