[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] CGI email
- Subject: RE: [cobalt-users] CGI email
- From: shimi <shimi@xxxxxxxxxxxxxxxx>
- Date: Mon May 7 22:15:11 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
On Tue, 8 May 2001, Chris Mason wrote:
> The present version of formmail doesn't provide an open relay. You have to
> specify the hosts you are allowing relay for.
>
I don't know if what I heard applies to the *current* version...
BUT
It was known that (again, maybe since it was fixed) the script checks
against the referer to see the if the host indeed matches one of the
list...
the bug was that if the referrer parm comes empty (easy thing to do) -
it'll let the mail go...
so unless you hard-code the *recipient* address IN THE SCRIPT (in the
version I saw, again!) - the script is indeed open-relay.
- shimi.