New Sendmail security feature

[Kai Schaetzl]

Ken A wrote on Wed, 14 Jun 2006 11:31:45 -0700:

> "by limiting the maximum message size accepted by your server (via the 
> sendmail MaxMessageSize option), you can eliminate the attack completely." 
>  
> Does anyone using sendmail NOT limit max message size you'll accept?

well, they are "vague" about the size. Even the original advisory at
http://www.sendmail.com/security/advisories/SA-200605-01.txt.asc
just says "very large". What is "very large"?

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com