> Posting  to  the  list  is inadequate.

I'm  sure  it  was  not  a deliberate targeting of the list membership
only,  but  rather  an  oversight  elsewhere.  In  an attempt to fix a
longstanding  bug, they forgot that users have come to expect that bug
and  work with/around it. There's not anything else we can do about it
here,  though.  You  should  write  to  Ipswitch directly, since their
monitoring of this list is unofficial.

> I'm a digest subscriber.

I  think  you should change the nature of your subscription; there are
countless  other  issues  discussed  on  the  list, most patched, some
outstanding,  that  are far more severe than this one. I was surprised
that  *this*  was  "the  first time [you]'ve been really pissed at the
product,"  especially  because  it's  more  a  corporate  issue than a
product issue.

> it's a major security hole now.

It's  a  spammer hole, but it's hard to call it a security hole, since
neither  your list membership, nor their data, are compromised. From a
list  manager's perspective, it may be a security, or more properly, a
privacy  issue.  But  be  aware  that IMAILSRV in your setup is hardly
suited  to  the  task of private lists, since it does not offer double
opt-in   and   because   it   uses   readily   forgeable  headers  for
authentication.  Only  with  password  protection,  which  I  strongly
recommend,  are  you  protected  from  someone  taking  a permissioned
poster's Reply-To: and using it as their From:.

-Sandy

P.S.  Are  you  aware that you are using a pretty inappropriate handle
for a technical support list, or does it not show up in your MUA?


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to