Re: Bug#207300: tmda: Challenge-response is fundamentally broken
[ Please do not send me CC's, as I have not explicitly asked for them. ]
* Tore Anderson
>> How many other innocent third parties have you spammed through the use
>> of this broken program? How many of these are Debian users, do you
>> think?
* Peter Makholm
> I think we could just as well remove postfix[0] on this account. I have
> received a lot of so called bounces because some silly postfix
> installation believes that I have send mail to some non-existant
> account.
I fully agree, and I would not hesitate to submit a RC bug on the
Postfix (or any other MTA) package, if it by default came with the
broken configuration you speak of.
However, a quick test shows that this is not the case (as Postfix
appears to reject the SMTP RCPT command for non-existent accounts),
so I fail to see how it is relevant.
--
Tore Anderson
Reply to: