Re: orbs.org accuses qmail of mailbomb relaying!

[John White]

On Fri, Jul 21, 2000 at 09:18:42AM -0400, Greg Owen wrote:
>       If I want to mailbomb foo.com, and bar.com is running qmail, then I
> can connect to bar.com's mail and say:
> 
> mail from: <[EMAIL PROTECTED]>   (not me, my victim)
> rcpt to: <[EMAIL PROTECTED]>          (presumed not to exist, will bounce)
> rcpt to: <[EMAIL PROTECTED]>          (same)
> ...                           (and so on)
> rcpt to: <[EMAIL PROTECTED]>          (same)
> data
> Subject: ha ha ha
> 
> Enjoy this DOS
> .
> quit
> 
>       And qmail will send 26 individual bounce messages, one for each
> nonexistent recipient at bar.com, back to our victim at foo.com.

Upon what are you basing this conclusion?  A real-life test?  Or
supposition?

John