[ On Wednesday, June 5, 2002 at 11:25:52 (-0400), Greg Ward wrote: ]
> Subject: Re: [Exim] Forged addresses from virus detectors
>
> On 05 June 2002, Patrice Fournier said:
> > Hmmm.. Could have it been your server which qualified an address of
> > <postmaster> to <postmaster@???>? Multiple pieces of stupidware
> > using an unqualified address is probably more probable than qualifying
> > such an address with the recipient domain. Still a wrongly configured
> > software though.
>
> Sounds believable, but:
>
> % nc mail.python.org 25
> 220 mail.python.org ESMTP Exim 4.02 Wed, 05 Jun 2002 11:23:32 -0400
> mail from:<postmaster>
> 501 <postmaster>: sender address must contain a domain
>
> Offhand, I don't even recall how to configure it so that's accepted.
> Not sure I want to know.
No you do NOT want to know. It should not even be possible. :-)
An unqualified "postmaster" address _MUST_ be accepted (in upper, lower,
or any mixed case) by the RCPT TO: command. However the MAIL FROM:
command requires a fully qualified address (or a nil address). Exim is
behaving correctly in rejecting the above command.
--
Greg A. Woods
+1 416 218-0098; <gwoods@???>; <g.a.woods@???>; <woods@???>
Planix, Inc. <woods@???>; VE3TCP; Secrets of the Weird <woods@???>
