[exim-dev] [Bug 855] Sender-callout-Verification should use …

Top Page
Delete this message
Reply to this message
Author: Peter Bowyer
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 855] Sender-callout-Verification should use VRFY not RCPT TO
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=855




--- Comment #9 from Peter Bowyer <peter@???> 2009-06-21 15:36:13 ---
(In reply to comment #8)

>
> The CPanel config has "sender callout verification" as a checkmark option.
>
> The CPanel technician indicated that Exim would use VRFY


It should be fairly easy to identify the problematic component, then.

>
>
> With no warnings from Exim, and no warnings from CPanel, and no indication that
> enabling it was 'mis-use', I think placing blame on new users is a bit odd.


An incompatible change might be proposed on the basis that the default
configuration is dangerous in the hands of new users. I was simply discounting
this as a factor in this case. Of course, CPanel may or may not use the default
configuration or even be derived from it.

>
>
> > Exim is a very stable system, and backwardly-incompatible changes must be
> > avoided. If you'd care to enter a suggestion to add access to 'VRFY' from the
> > ACLs in addition to the existing callout mechanism, further consideration would
> > likely be given. But the devs would probably need convincing as to how widely
> > it could be used given the widespread disabling of VRFY in the real world.
> >
> > -1 for code change, +1 for doc change
> >
>
> I support document change, both in Exim and in Cpanel.


CPanel users are unlikely to see the Exim documentation, unfortunately. You'll
need to lobby the CPanel maintainers.

>
> I was trying to use something that looked like it would be a useful tool, with
> no indication that the "bridge is out ahead".
>
> Now I'm attempting to help other uninformed users by getting "something"
> changed.


Fair do's, no problem with that.


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email