Re5: Solved: Help: my PO is open relay

[anita@xxxxxxxxx (Anita Holmgren)]

At 4:46 PM -0800 12/10/03, Glenn A. Bookout wrote:
> > >    Also, I thought that POP-before-SMTP was based on an ID/IP 
> > > address pair for successful sending, how can an "outsider" obtain 
> > > that information in order to exploit the system?
> >
> > The current implementation is based on user account information, 
> > not IP address.
>    Makes sense.
>
>    Does "current implementation" imply that the previous 
> implementation used the IP address in some way?  That was my 
> impression.

Yes, you got that impression from the initial release. 
POP-before-SMTP was buggy and we corrected it by revising the entire 
scheme. So now it works very well, but it does have the restriction 
of matching pop login name with email address.  In cases where this 
is problematic, we supplied SMPT-AUTH.

-Anita
--
Tenon Intersystems                                       805-963-6983
232 Anacapa Street, #2A                               anita@xxxxxxxxx
Santa Barbara, CA 93101                          http://www.tenon.com
---------
Tenon Intersystems' Post.Office Mailing List
To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
with the body only containing: unsubscribe
Find the searchable mailing list archives at:
http://postoffice.computeroil.com/