Relaying in MDaemon

From: Arvel Hath*** (arvel@altn.com)
Date: 08/17/01 

Message-ID: <008d01c12734$2b716940$0100a8c0@arvel>
From: "Arvel Hath***" <arvel@altn.com>
To: <bugtraq@securityfocus.com>
Subject: Relaying in MDaemon
Date: Fri, 17 Aug 2001 10:49:04 -0500

> It seems like that Mdaemon SMTP server can be used for
> unauthorized relaying. Mail can be relayed when sent
> "FROM or TO known user", it means that mail sent "from"
> the account of one of served domains always can be relayed.
> There is no problem to specify any "from" user, for
> example, system account "mdaemon".

Please read the manual. There are ways of verifying addresses. Also, the
default installation does not allow mail relaying. You have enabled it
yourself. There is a switch setting that prevents this sort of thing and it
is set by default.

Arvel Hath***
CEO, Alt-N Technologies Ltd.
http://www.altn.com
============================
http://www.mdaemon.com
http://www.relayfax.com
============================

Quantcast