Thank you Dr. Len ;-)  I'll be 'un-checking' the ADPHA feature via IMail.

~Rick

> So, my last comment in this thread:
>
> ADPHA is a broken idea, above all in an ESTMP session, and the
> response is
> broken.  (In fact, it's really too bad that Imail is not full of other
> dynamic, defensive features like ADPHA, only implemented correctly.)
>
> In practice, 512+ SMTP command bytes of "PHA" seems to be a minuscule
> occurrence in the wild, so Imail�s ADPHA feature, twice broken, actually
> offers very little protection, especially as long as Imail is immune to
> this RFC-legal "attack".
>
> However, the 512+ bytes "PHA" does occur, but so rarely that any Imail
> admin will probably be seriously stretched, and delayed, trying to track
> down why Imail refuses all mail from just one ip, perhaps one that is
> relay-from-addresses as is IMGate, that it has been receiving mail from,
> and worse, and the event triggering the shudown is not in today's
> log file.
>
> Checking ADPHA offers no protection to Imail (which at this point MUST be
> immune), but it can really screw you up, and requires manual intervention
> to clear, after you've figured out what is going on.  The ADPHA "cure"
> (permanently shutting down an MTA for a single, one-line "transgression")
> is worse than the completely innocuous, RFC-legal PHA "disease".
>
> The wrongness can be made innocuous and brokenness is easy to fix, so
> unchecking ADPHA is the only recommendation for every IMail installation.
>
> Len
>

___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to