> "Allow  relay  for  [Addresses]"  is supposed to mean that the Imail
> server  is  allowed  to  take  mail from the listed IP addresses and
> relay it elsewhere, no matter where.

Sorry,   but   it's  only  supposed  to  mean  that  if  you  do  just
that--suppose--instead  of  reading  the  manual. "For" is a perfectly
ambivalent term for what the function does.

>  It  is  strange  that  you  have  to  list  the  IP  address of the
> store-and-forward target host there.

Quirky, strange...and well-known for at least 5 years.

> I see Len has already found that this part of Imail is broken.

The   vulnerability   inherent   in   the   architecture,   while  not
insignificant,  has  been known in the IMail community by anyone who's
ever set up store and forward.

It  could  be  done a lot better, but there's nothing earth-shattering
about  something  that's  fully publicized by the vendor in the manual
and  KB.  I  doubt  anybody's  been victimized in the fashion that Len
describes, though the publicity may now lead to both abuse *and* a new
implementation from Ipswitch.

-Sandy


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to