> While I would agree allowing custom HELO status lines does nothing
> for security, if someone wants to submit a patch, we'd be happy to
> review it. Wouldn't we?
The current code is this:
responseBuffer.append("220 ")
.append(theConfigData.getHelloName())
.append(" SMTP Server (")
.append(SOFTWARE_TYPE)
.append(") ready ")
.append(rfc822DateFormat.format(new Date()));
Replacing it properly would also involve implementing replacable parameters
like we use for SQLResources.java and XMLResources.java. I've been thinking
of moving the string replacement code into a common utility class. There
was another use for it raised within the past week or so.
The minimum set of replacement parameters would be ${HELLONAME}, ${VERSION},
${DATE}. The default would be equivalent to:
<identification>
${HELLONAME} SMTP SERVER (JAMES SMTP Server ${VERSION}) ready ${DATE}
</identification>
--- Noel
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
