DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15579>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15579

SMTP Handler DATA buffering issue





------- Additional Comments From [EMAIL PROTECTED]  2002-12-20 22:22 -------
My reasons to address this:
- This is a valid test case... James should either accept the message or give a
rejection.  It shouldn't just hang until the connection times out.
- Data accumulates in a buffer in InputStreamReader (as well as
BufferedInputStream and BufferedReader), and with the hanging until connection
timeout, this opens the door to a relatively easy DOS.

My reasons to accept the message:
- It is easy to implement.
- Spammers send email without worrying about request/response nature of SMTP. 
By accepting the message, we allow the admin to use mailets to analyze the
messages and otherwise decide for themselves how they would like to handle these
messages.
- With Sendmail, Exchange, Qmail, and Domino all accepting the message with this
test case, I think the impact the James project would have towards proliferating
bad client behavior by accepting the message is trivial.
- This is how James used to work before the recent performance and scaling
refactoring.

I'll attach the patch to fix this should be so agree.

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to