Great Circle Associates Majordomo-Users
(October 1998)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Fogot footnotes [Re: security problem with sender in config]
From: Jeffrey Goldberg <J . Goldberg @ Cranfield . ac . uk>
Organization: Cranfield University Computer Centre
Date: Sat, 24 Oct 1998 03:43:56 +0100 (BST)
To: Majordomo Users List <majordomo-users @ GreatCircle . COM>
In-reply-to: <Pine.LNX.4.02.9810232114160.7689-100000@arpad.thegreen.private>
Reply-to: Jeffrey Goldberg <J . Goldberg @ Cranfield . ac . uk>

Sorry, I forgot to put in the footnotes indicated in my message.

I will add them now (unfortunately repeating much of my original).
They don't affect the substance of what I wrote, (otherwise they wouldn't
have been footnotes), but they do forstall some misunderstanding of what
I said.

On Fri, 23 Oct 1998, Jeffrey Goldberg wrote:

> It's not quit the same.  I want to be able to say that any sender for
> a message originating[1] from my server is correct and any message
> origininating from my host[2] is correct if it comes from a privileged
> process making the connection.  So while someone could relay a message
> though my server with whatever envelope from they want[3], or make their
> own SMTP connection from my server, there is still a degree to which I
> want my STMP server to be trustworthy in its envelope froms.

Notes:  [1] Yes, I know that MD should probably not be considered the
  "originator", but there is a reasonable sense in which it should be
   considered something like an originator and it is in that sense that
   this concern is relevant.

  [2] Here I am explicitly making the distinction between host and server.
   often we can get away with conflating the two, but the concern is about
   processes run by ordinary users that pretend to be MTAs injecting mail.

  [3] Subject to the relaying constraints and other checks that the server
   makes.   

-j
--
Jeffrey Goldberg                +44 (0)1234 750 111 x 2826
 Cranfield Computer Centre      FAX         751 814
 J.Goldberg@Cranfield.ac.uk     http://WWW.Cranfield.ac.uk/public/cc/cc047/
Relativism is the triumph of authority over truth, convention over justice.



References:
Indexed By Date Previous: Re: How to use MASTER.PASSWD on MajorCool (Dave Wolfe)
From: Bill Houle <bhoule@sparc.sandiegoca.ncr.com>
Next: Can't get archive2 to work
From: "Robert Boyd Skipper" <robert@skipperweb.org>
Indexed By Thread Previous: Re: security problem with sender in config
From: Jeffrey Goldberg <J.Goldberg@Cranfield.ac.uk>
Next: Restrict-post by domain?
From: Thomas Gramstad <thomasg@ifi.uio.no>

Google
 
Search Internet Search www.greatcircle.com