M Champion:
> The DB dump shows :
> 
> londonstransport+bncbdzntlposqirbr426sgamgqeh7mv...@googlegroups.com??? 
> 0:0:1637682515:250 2.1.5 OK s8si901258edx.4 - gsmtp

There are 0xc2 0xa0 bytes at the end of the storage key, but not
in your query.

Your postmap queries will have a shell command injection attack
of the command is processed by a shell.

> Another thing that occurred to me (in direct opposition to my vanity 
> project which is to log those I allow to bypass the verify check against 
> those that would passed the check anyway), is that it is pretty 
> pointless adding certain groups to the database where there sender 
> address is unique and unlikely to ever be repeated.

That's one reason why it is a bad idea to use address verification 
for such domains.

        Wietse

Reply via email to