[imp] IMP as an open relay

Jan Schneider jan@horde.org
Mon, 27 May 2002 17:27:14 +0200


Zitat von Chuck Hagenbuch <chuck@horde.org>:

> Quoting Jan Schneider <jan@horde.org>:
> 
> > No, I think he is right because he didn't say that someone can relay
> with
> > another mail server but (to keep this example) our demo server once
> he's
> > authenticated using any external imap/pop server.
> 
> No.
> 
> If we tried to follow his suggestion and made the user supply an SMTP 
> server, chances are about zero that we could actually _use_ that SMTP 
> server to send mail on the user's behalf.
> 
> IMP demo site -> connects to user's local SMTP server -> tries to send
> mail 
> to someone not at that ISP -> Whoops! Relaying denied.
> 
> It's just not feasible for the vast majority of cases.

Yes, you're absolutely right. I wasn't clear with what I said. I didn't mean
he's right with his suggestion but right with the assumption that it's
possible to use an IMP server without server list for relaying.

Jan.

--
http://www.horde.org - The Horde Project
http://www.ammma.de - discover your knowledge
http://www.tip4all.de - Deine private Tippgemeinschaft