Menu

#45 Alias addresses being bypassed

open
nobody
None
5
2006-02-12
2006-02-12
geckonapper
No

A message sent from an *alias* of an ASK-filtered
account will automatically add the actual address to
the whitelist and go through.

For example, I have an alias "sales" which points to
"burma". Any message spoofed from "sales@mydomain.com"
will automatically add "from burma@mydomain.com" to the
whitelist and get delivered. And each succesive send
from "sales@mydomain.com" will add a new duplicate
entry of "from burma@mydomain.com" to the whitelist.

One solution of course would be to add
"sales@mydomain.com" to rc_mymails. On this system
though, there are *many* aliases for
"burma@mydomain.com" and they are often created
on-the-fly and from remote locations. So if the only
solution were to add those aliases to rc_mymails, then
that is a usability bug in my opinion.

Discussion


Log in to post a comment.