I notice that the default plugin config file shipped with 0.40 contains the lines

auth/auth_flat_file
auth/authnull
auth/authdeny

Given that authnull allows anything to connect as authenticated this allows anything to use such an smtp server as an open relay.

Rick

Reply via email to