Author: David Woodhouse Date: To: Magnus Holmgren CC: Odhiambo G. Washington, exim-users Subject: Re: [exim] sender callout mail_from change
On Mon, 2007-01-29 at 22:02 +0100, Magnus Holmgren wrote: >
> Damn, you're right. I didn't expect that. I mean, Exim provides many hacks to
> deal with broken servers, so I can't see why mailfrom shouldn't be available
> to those who know what they're doing.
Anyone who really knows what they're doing wouldn't be trying to set a
non-empty MAIL FROM:<> on a sender callout. It's a denial of service
attack waiting to happen.
The correct response for the OP is to get the admin of the offending
broken mail server to fix it. Failing that, exempt it from callouts.
