Re: [exim] Exim hostlist in the exim config - related to CV…

Góra strony
Delete this message
Reply to this message
Autor: Jeremy Harris
Data:  
Dla: exim-users
Temat: Re: [exim] Exim hostlist in the exim config - related to CVE-2019-15846
On 10/09/2019 12:33, Michael Love via Exim-users wrote:
> We have a restricted hostlist of only other servers able to email exim 4.86.
> For this new vulnerability, is the TLS handshake executed before the whitelist hostlist lookup, or is the whitelist hostlist queried first?


It depends where you've used this hostlist in your config,
and whether you support TLS-on-connect.
--
Cheers,
Jeremy