AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss (fwd)

Julian Field mailscanner at ecs.soton.ac.uk
Tue Apr 8 18:12:23 IST 2003


Am I allowed to sound smug and say "this is exactly why MailScanner doesn't
get involved in SMTP provision or message delivery"...

At 17:59 08/04/2003, you wrote:
>Hi!
>
>Naturally nobody on the list uses Amavis anymore <cough cough> but just in
>case you see it happening:
>
>---------- Forwarded message ----------
>Date: Mon, 7 Apr 2003 14:23:47 +0200
>From: Phil Cyc <ajEA3UMBepQ4MRExDmm0qbFeeQEJtffpg.1 at protected.unixadm.org>
>Subject: AMaViS-ng 0.1.6.x and postfix: possible open relay and mail loss
>
>Hi everyone -
>
>with postfix using AMaViS-ng 0.1.6.x (tested: 0.1.6.2 and 0.1.6.3; 0.1.4.x is
>not vulnerable), all email gets forwarded to the address specified by the
>"To:" header line, ignoring the real recipient given via "RCPT TO:".

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support



More information about the MailScanner mailing list