Hello, when IMP sends a message, it adds Received: header containing address of connecting server, or first server in X-Forwarded-For: HTTP header (if it exists).
However if untrusted client sends whatever data in X-Forwarded-For: header, the address (e.g. from private IP raqnge) is used. This results into useless garbage inserted into mail headers which mey not be found in horde logs (horde does not always log the correct IP). Is it possible to add option either to ignore the header, or only to trust defined set of IP addresses/ranges which would be trusted (followed)? -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Posli tento mail 100 svojim znamim - nech vidia aky si idiot Send this email to 100 your friends - let them see what an idiot you are -- IMP mailing list - Join the hunt: http://horde.org/bounties/#imp Frequently Asked Questions: http://horde.org/faq/ To unsubscribe, mail: [EMAIL PROTECTED]
