On 21.01.08 15:21, Matus UHLAR - fantomas wrote: > when IMP sends a message, it adds Received: header containing address of > connecting server, or first server in X-Forwarded-For: HTTP header (if it > exists). > > However if untrusted client sends whatever data in X-Forwarded-For: header, > the address (e.g. from private IP raqnge) is used. This results into useless > garbage inserted into mail headers which mey not be found in horde logs > (horde does not always log the correct IP). > > Is it possible to add option either to ignore the header, or only to trust > defined set of IP addresses/ranges which would be trusted (followed)?
OK, bug sent, number 6133 -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. You have the right to remain silent. Anything you say will be misquoted, then used against you. -- IMP mailing list - Join the hunt: http://horde.org/bounties/#imp Frequently Asked Questions: http://horde.org/faq/ To unsubscribe, mail: [EMAIL PROTECTED]
