Re: RSET command - possible security loophole


Hi Hector,
At 12:58 31-05-2011, Hector Santos wrote:

In regards to authentication, in our code, for IP based (RelayTables, POPB4SMTP), it can not change the authentication based onIP. For ESMTP AUTH, once the session authenticated, per RFC2554,section 4, it will not allow another AUTH to be issued with a 503 response.


Is your implementation compliant with RFC 2554 or RFC 4954?

Regards,

-sm

<Prev in Thread]	Current Thread	[Next in Thread>
Re: RSET command - possible security loophole, (continued) Re: RSET command - possible security loophole, Hector Santos Re: RSET command - possible security loophole, John C Klensin Re: RSET command - possible security loophole, Hector Santos Re: RSET command - possible security loophole, Keith Moore Re: RSET command - possible security loophole, John C Klensin RE: RSET command - possible security loophole, Murray S. Kucherawy RE: RSET command - possible security loophole, ned+ietf-smtp Re: RSET command - possible security loophole, ned+ietf-smtp Re: RSET command - possible security loophole, John C Klensin Re: RSET command - possible security loophole, Hector Santos Re: RSET command - possible security loophole, SM <= Re: RSET command - possible security loophole, Hector Santos Re: RSET command - possible security loophole, Derek J. Balling Re: RSET command - possible security loophole, Hector Santos Re: RSET command - possible security loophole, John Levine Re: RSET command - possible security loophole, ned+ietf-smtp Re: RSET command - possible security loophole, Dave Crocker Re: RSET command - possible security loophole, Tony Finch Re: RSET command - possible security loophole, Glenn Anderson Re: RSET command - possible security loophole, Hector Santos Re: RSET command - possible security loophole, John C Klensin