Charles Cazabon <[EMAIL PROTECTED]> writes:
> This is just a guess, because you haven't given us enough information to
> go on, but perhaps just because qmail-smtpd is not immediately aborting
> with an error after the RCPT TO: portion of the smtp transaction, you think
> that's relaying. It's not a relay unless the message makes it to its
> final destination.
Yes - but I think that's a misunderstanding for many people (and some
security-scanners). Additionaly you could try to to send mails RCPT TO:
|testing@localhost or RCPT: /tmp/testfile@localhost. Some
security-scanners then assume your MTA has a problem but in reality
qmail-smtpd (or better qmail-local?) delivers these wrong adressed mails
to postmaster. And because not being able to trace the wrong adressed
mail you get a security-hole reported where no hole exists.
Martin
