> We've  running  several  webservers beside our imail server (v 7.15)
> and  from  one  of  this  servers  a  user has send a message from a
> web-form width a mailfrom address like this:

> "<Name Surname <[EMAIL PROTECTED]>"

It's  not the server's fault that you're not validating form input and
allowing a broken SMTP envelope command, is it?

> ...but nothing about "malformed recipient addresses"

But  are  you  are  sure  that  there  aren't  extraneous non-printing
characters  being  sent  as  well? I don't get locked out by typing an
address like the one above.

> So or I am missing something or anyone should be carefull with this setting.

I'd  say  you  should  be  careful  to only send a mail server a valid
sender  address  if  you  don't want the mail rejected for any reason.
It's especially important when it's one of your own servers!

--Sandy


------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange Addresses into IMail Aliases!
  
http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to