Bugtraq mailing list archives
Relaying in MDaemon
From: "Arvel Hathcock" <arvel () altn com>
Date: Fri, 17 Aug 2001 10:49:04 -0500
It seems like that Mdaemon SMTP server can be used for unauthorized relaying. Mail can be relayed when sent "FROM or TO known user", it means that mail sent "from" the account of one of served domains always can be relayed. There is no problem to specify any "from" user, for example, system account "mdaemon".
Please read the manual. There are ways of verifying addresses. Also, the default installation does not allow mail relaying. You have enabled it yourself. There is a switch setting that prevents this sort of thing and it is set by default. Arvel Hathcock CEO, Alt-N Technologies Ltd. http://www.altn.com ============================ http://www.mdaemon.com http://www.relayfax.com ============================
Current thread:
- Relaying in MDaemon Arvel Hathcock (Aug 17)
- Re: Relaying in MDaemon Tabor J. Wells (Aug 17)
- RE: Relaying in MDaemon ((UPDATED ALEPH)) JNJ (Aug 19)
- Re: Relaying in MDaemon Tabor J. Wells (Aug 17)