There's one problem I can see about dbmail's last_login field, for use with 
POP before SMTP authentication methods..

Mainly, it doesn't store the last address the authenticator came from. Without 
that, POP-before-SMTP is almost useless, because once someone logs into POP, 
authenticated, then for ~5 minutes, or whatever time frame the timeout is, 
/anyone/ could send mail through the same account. 

This would be useful for supporting numerous amounts of MTA's, namely the one 
I use, exim, which could do an ACL query to:
SELECT last_host WHERE last_login > (now() - '5 minutes'::INTERVAL)::datetime;
For an automagic trusted-hosts adjustment based on the host that authenticated 
to POP within 5 minutes.

-- 
Eric Renfro
Myrddin Computers & Designs - CEO/President
Sales: [EMAIL PROTECTED]
Fax: (775) 243-4535

Reply via email to