Re: Bug#207300: tmda: Challenge-response is fundamentally broken
On Wed, Aug 27, 2003 at 10:00:13PM +1000, Brian May wrote:
> On Wed, Aug 27, 2003 at 12:58:19PM +0200, Peter Makholm wrote:
> > Tore Anderson <tore@linpro.no> writes:
> > > How many other innocent third parties have you spammed through the use
> > > of this broken program? How many of these are Debian users, do you
> > > think?
> > I think we could just as well remove postfix[0] on this account. I have
> > received a lot of so called bounces because some silly postfix
> > installation believes that I have send mail to some non-existant
> > account.
> I think the difference here is that postfix never bounces valid emails.
> Apparently TMDA will under some situations???
[...]
TMDA will send a mail saying something along the lines of "This is
the first mail I've received from your address, I won't actualy
recieve it until you send "verify fgf$%ZTRD4315835671658998719710" to
tmda-verify@some-address.
Comparing to vacation(1) fits better.
cu andreas
Reply to: