Re: [exim] Local user enumeration through RCPT

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Phill Wood
Ημερομηνία:  
Προς: Peter Bowyer, steve
Υ/ο: exim users
Αντικείμενο: Re: [exim] Local user enumeration through RCPT
On Dec 17, 2007 2:17 PM, Peter Bowyer <peter@???> wrote:

> On 17/12/2007, Phill Wood <phill.wood@???> wrote:
> > Hi All
> >
> > One of the servers we look after was recently "penetration tested" and
> they
> > could find very little wrong so they complained about silly things like
> it's
> > possible to see which users locally exist on the server through the
> answer
> > Exim provides to the RCPT command.
>
> Good. Tell them to read up on email best practice.



Exactly! Thanks both.


Cheers
Phill