RE: [cobalt-users] SMTP hole maybe - any ideas

["Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>]

> If we send an email to an email address that is located on 
> our raq3 and send it from another email address that is also 
> on the same raq3, then it is relayed without any prevention 
> what so ever and without any POP3 account being polled as per 
> the pop b4 smtp system.

I'm not sure what your point is. Any email destined for a domain on your
server will be accepted no matter who the sender is or whether they
connect directly to your MX or use someone else's SMTP.

> 
> It seems that if a person knows of domains on a server, they 
> could send emails purporting to come from other users on the 
> ssame server without any problem what so ever.

Why not? Unless the IP they're connecting from is in your access list to
be blocked, why shouldn't the email get through? The sender's domain
won't affect whether they can send to a domain on your server or not.
-- 
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.