------- You are receiving this mail because: -------
You are on the CC list for the bug.
http://bugs.exim.org/show_bug.cgi?id=855
--- Comment #9 from Peter Bowyer <peter@???> 2009-06-21 15:36:13 ---
(In reply to comment #8)
>
> The CPanel config has "sender callout verification" as a checkmark option.
>
> The CPanel technician indicated that Exim would use VRFY
It should be fairly easy to identify the problematic component, then.
>
>
> With no warnings from Exim, and no warnings from CPanel, and no indication that
> enabling it was 'mis-use', I think placing blame on new users is a bit odd.
An incompatible change might be proposed on the basis that the default
configuration is dangerous in the hands of new users. I was simply discounting
this as a factor in this case. Of course, CPanel may or may not use the default
configuration or even be derived from it.
>
>
> > Exim is a very stable system, and backwardly-incompatible changes must be
> > avoided. If you'd care to enter a suggestion to add access to 'VRFY' from the
> > ACLs in addition to the existing callout mechanism, further consideration would
> > likely be given. But the devs would probably need convincing as to how widely
> > it could be used given the widespread disabling of VRFY in the real world.
> >
> > -1 for code change, +1 for doc change
> >
>
> I support document change, both in Exim and in Cpanel.
CPanel users are unlikely to see the Exim documentation, unfortunately. You'll
need to lobby the CPanel maintainers.
>
> I was trying to use something that looked like it would be a useful tool, with
> no indication that the "bridge is out ahead".
>
> Now I'm attempting to help other uninformed users by getting "something"
> changed.
Fair do's, no problem with that.
--
Configure bugmail:
http://bugs.exim.org/userprefs.cgi?tab=email
