Author: Phill Wood Date: To: Peter Bowyer, steve CC: exim users Subject: Re: [exim] Local user enumeration through RCPT
On Dec 17, 2007 2:17 PM, Peter Bowyer <peter@???> wrote:
> On 17/12/2007, Phill Wood <phill.wood@???> wrote:
> > Hi All
> >
> > One of the servers we look after was recently "penetration tested" and
> they
> > could find very little wrong so they complained about silly things like
> it's
> > possible to see which users locally exist on the server through the
> answer
> > Exim provides to the RCPT command.
>
> Good. Tell them to read up on email best practice.
