Sorry for starting the discussion. If I set up an script that generates mail from one adress in the rcpthost to Another adress in rcpthost I can fill every mailbox on the server ...
I thought that smtp auth should prevent that anyone could send messages through the Server without being authenticated ... But I you do it this way you can RELAY without Being smtp authenticated Bård Tommy -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter Palmreuther Sent: 15. juli 2003 13:52 To: [EMAIL PROTECTED] Hi Bård, On Mon, 14 Jul 2003 21:10:09 +0200 Bård Tommy Nilsen wrote: > When I tried to relay trough my test server with an to Address that > matched one domain in rcpthost it accepts the relay. Well ... what do you think 'rcpthosts' is for? You have no idea? READ THE FU^HINE MANUAL! It would be a bug if qmail did _NOT_ accept the mail adressed to somebody whos domain is in 'rcpthosts', unless the recipients address is blocked otherwise, e.g. by 'badmailto' or 'chkusr' patch. -- Ciao, Pit
