On 7/6/05, Tomas Kuliavas <[EMAIL PROTECTED]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > Hi > > > > > > I am running squirrelmail with postfix on debian sarge. As far as I > > can see squirrelmail appends the IP address of the client machine (The > > one sending the email thoung the webinterface). > > > > Is it possible to prevent this or do I have to modify the source? If I > > have to modify the source can anyone point me to the function that appends > > the IP adress? > > check squirrelmail 1.4.5 changelog and SquirrelMail bug tracker 847107 > 'security hole squirrelmail mails real userid'. > > https://sourceforge.net/tracker/index.php?func=detail&aid=847107&group_id=311&atid=423679 > > This header violates users' privacy, but protects SquirrelMail admins (you).
I am the only user of the system so I feel pretty safe. It would be nice if ssquirrelmail at least scrampled the information. But from the info in the bug report I think I can modify the source not to include it. Thanks Martin ------------------------------------------------------- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click -- squirrelmail-users mailing list Posting Guidelines: http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines List Address: [email protected] List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id)95 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
