> On Wed, 2 Jul 2008, Michel wrote: > ... >> >> >> even if you are right it does not help so much since the MTA should be configured >> to mail correctly so it does not matter if some else use the account because the > > > do you actually know what you are saying? > oh yes! > how the hell is the MTA to know what is genuine Email and what is not, that's the point, it does not and does not need to as well as SM does not need to check if a correct user/password given is typed by the client or by any other individual > when they both posted from the same machine and its told to realy for that is the other point, the exploiter will probably NOT post from the same computer and that is where the correct MTA config hooks in: NOT allowing mail relay michel **************************************************** Tecnologia Internet Matik http://info.matik.com.br Sistemas Wireless para o Provedor Banda Larga Hospedagem e Email personalizado - e claro, no Brasil. **************************************************** ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08 ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
