On 11 Sep 2002 at 15:51, Davide Libenzi wrote:
> > On Wed, 11 Sep 2002, EDV - WHW (Goesta Smekal) wrote: > > > Well, technically speaking you are certainly right (you wrote the > > daemon anyway ;-) ) but what I need is an aproach, non-techs can > > easily understand. > > This is _really_ a tech argoument, doing filters is definitely not an > XMail 101 task. You screw up with filters, you lose messages. Sorry, I did not mean _users_ should uderstand how to _build the filters_. They don't even have access to the filters dir, and it is good that way ;-) (besides they don't even have access to the system except POP/SMTP - as it should be with any mailserver, but we are not discussing 'how to secure a server', are we ?) Users (on remote systems, not 'my' users) should easily be able to check the vailidity of the origin of mails that claim to come from my.domain. You can't expect the average user to know how to display mail header fields with his/her MUA, but you can expect them to see the dig-sig at the end. And if they bother me I tell them 'if no sig there, not from me pal'. So until Worm-writers forge my digital signature I am in advantage. And I don't expect this to happen anyway ;-) Personal note: Is my english that bad, or my idea of signing outgoing mail so weird, that it takes four postings to make it clear ? `:-) Thanks for taking the time ... Goesta -- Let's stand together against 'Palladium' ... Link arms, don't make them http://online.securityfocus.com/columnists/96 - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
