[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Fwd: Please confirm your message



On Tue, Dec 03, 2002 at 11:52:38PM +0100, Andreas Fuchs wrote:
> Today, Adam McKenna <adam@flounder.net> wrote:
> > On Mon, Dec 02, 2002 at 11:49:09PM +0100, Andreas Fuchs wrote:
> >> Right. I just thought up a scheme to exploit this, based on the fake
> >> source-IP address approach you find in descriptions of ping-floods.
> > 
> > Wow, you're pretty smart.  Nobody has thought of this before,
> > especially not the authors of said programs.
> 
> *makes a mental note never to use the term "I just thought up" again*
> 
> Please enlighten me, anyway: Why is bouncing the full body of the mail
> you received from a person who claims to be Adam back to Adam a good
> idea?

This is an implementation issue, not a philosophical issue.  Since I only use
TMDA I can't speak for others but TMDA has a CONFIRM_MAX_MESSAGE_SIZE
configuration variable, which will exclude the body of the message from the
confirmation request if its size exceeds the defined value.  The default is
50k.

--Adam

-- 
Adam McKenna  <adam@debian.org>  <adam@flounder.net>



Reply to: