Thank you Dr. Len ;-) I'll be 'un-checking' the ADPHA feature via IMail. ~Rick
> So, my last comment in this thread: > > ADPHA is a broken idea, above all in an ESTMP session, and the > response is > broken. (In fact, it's really too bad that Imail is not full of other > dynamic, defensive features like ADPHA, only implemented correctly.) > > In practice, 512+ SMTP command bytes of "PHA" seems to be a minuscule > occurrence in the wild, so Imail�s ADPHA feature, twice broken, actually > offers very little protection, especially as long as Imail is immune to > this RFC-legal "attack". > > However, the 512+ bytes "PHA" does occur, but so rarely that any Imail > admin will probably be seriously stretched, and delayed, trying to track > down why Imail refuses all mail from just one ip, perhaps one that is > relay-from-addresses as is IMGate, that it has been receiving mail from, > and worse, and the event triggering the shudown is not in today's > log file. > > Checking ADPHA offers no protection to Imail (which at this point MUST be > immune), but it can really screw you up, and requires manual intervention > to clear, after you've figured out what is going on. The ADPHA "cure" > (permanently shutting down an MTA for a single, one-line "transgression") > is worse than the completely innocuous, RFC-legal PHA "disease". > > The wrongness can be made innocuous and brokenness is easy to fix, so > unchecking ADPHA is the only recommendation for every IMail installation. > > Len > ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
