Firewalls: Re: smap vs. smtpd

Firewalls
(January 1997)

Indexed By Thread: [Previous] [Next]

Subject:	Re: smap vs. smtpd
From:	Rick Murphy <rick @ tis . com>
Date:	Fri, 24 Jan 1997 09:28:08 -0500
To:	proff @ suburbia . net
Cc:	firewalls @ greatcircle . com

At 03:57 PM 1/24/97 +1100, proff @
 suburbia .
 net wrote:
>Last time I looked it only checked rcpt to: et al
>
>-Julian <proff @
 iq .
 org>
Nope. FWTK 1.3 (November 1994 checks both the envelope and the headers.)
I haven't looked back farther than that but I suspect that it's always
verified headers - how else could you protect from
"Errors-To: | /bin/cat /etc/passwd | .." attacks?
	-Rick

Follow-Ups:

Re: smap vs. smtpd
From: Carl Karlsson <ckn @ findata . se>

Indexed By Date	Previous:	syslogd problems From: rotert @ lpi . ruhr-uni-bochum . de (Bernd Rotert)
Indexed By Date	Next:	Re: syslogd problems From: Jesse Whyte <jesse @ psa . pencom . com>
Indexed By Thread	Previous:	Re: smap vs. smtpd From: Michael Ferioli <Michael . Ferioli @ Comnet . Com . Tr>
Indexed By Thread	Next:	Re: smap vs. smtpd From: Carl Karlsson <ckn @ findata . se>