Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-09 Thread Devendra Singh
At 09/06/04 14:03 (), you wrote: Hi Devendra, At 18:38 07.06.04 +0530, you wrote: >Hi, > >I am using Erwin Hoffmann's qmail-smtpd-auth-0.4.2. Thanks for using it. >I have noticed that once authenticated a user can use [EMAIL PROTECTED] >(where server.com is a domain listed in rcpthosts) in the FROM

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-09 Thread Erwin Hoffmann
Hi Devendra, At 18:38 07.06.04 +0530, you wrote: >Hi, > >I am using Erwin Hoffmann's qmail-smtpd-auth-0.4.2. Thanks for using it. >I have noticed that once authenticated a user can use [EMAIL PROTECTED] >(where server.com is a domain listed in rcpthosts) in the FROM header. Is >there any reme

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-08 Thread Devendra Singh
At 08/06/04 11:41 (), Tom Collins wrote: On Jun 7, 2004, at 9:28 PM, Devendra Singh wrote: I would like to re-frame my Subject: "SMTP Authenticated user is able to impersonate anyone in rcpthosts". You could re-frame it even more. Authenticated SMTP users can use any FROM address and submit mail

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Tom Collins
On Jun 7, 2004, at 9:28 PM, Devendra Singh wrote: I would like to re-frame my Subject: "SMTP Authenticated user is able to impersonate anyone in rcpthosts". You could re-frame it even more. Authenticated SMTP users can use any FROM address and submit mail for any host. Some clients may have mul

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Devendra Singh
At 07/06/04 21:27 (), you wrote: On Monday 07 June 2004 10:17 am, Devendra Singh wrote: > > Sorry Jeremy, > > Perhaps I was unable to explain the problem properly. > > Suppose a Server is hosting the following domains: > > abc.com > xyz.com > test.com > > ok. > Now, the user [EMAIL PROTEC

RE: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Shouguan Lin
: Monday, June 07, 2004 6:08 AM To: VpopMail Mailing List Subject: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts Hi, I am using Erwin Hoffmann's qmail-smtpd-auth-0.4.2. I have noticed that once authenticated a user can use [EMAIL PROTECTED] (where server.com is a domain list

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Jeremy Kitchen
On Monday 07 June 2004 10:17 am, Devendra Singh wrote: > > Sorry Jeremy, > > Perhaps I was unable to explain the problem properly. > > Suppose a Server is hosting the following domains: > > abc.com > xyz.com > test.com > > ok. > Now, the user [EMAIL PROTECTED] has been enabled for SMTP

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Devendra Singh
At 07/06/04 20:05 (), you wrote: On Monday 07 June 2004 08:08 am, Devendra Singh wrote: > Hi, > > I am using Erwin Hoffmann's qmail-smtpd-auth-0.4.2. > > I have noticed that once authenticated a user can use [EMAIL PROTECTED] > (where server.com is a domain listed in rcpthosts) in the FROM header.

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Jeremy Kitchen
On Monday 07 June 2004 08:08 am, Devendra Singh wrote: > Hi, > > I am using Erwin Hoffmann's qmail-smtpd-auth-0.4.2. > > I have noticed that once authenticated a user can use [EMAIL PROTECTED] > (where server.com is a domain listed in rcpthosts) in the FROM header. even an unauthenticated user can

[vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Devendra Singh
Hi, I am using Erwin Hoffmann's qmail-smtpd-auth-0.4.2. I have noticed that once authenticated a user can use [EMAIL PROTECTED] (where server.com is a domain listed in rcpthosts) in the FROM header. Is there any remedy. __ Devendra Singh IndiaM