OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: RE: Anti-relay madness
From: Martin Mielke (martinmpeople-com.com)
Date: Fri Sep 15 2000 - 10:10:34 CDT

>
> On Fri, 15 Sep 2000, Martin Mielke wrote:
>
> > d) from uservalid-remotedomain.com to
> usermydomain.com -- email is
> > sent
>
> You don't really want to prevent 'd' from occurring. You
> won't get any
> mail at all then.
>
> Brian
>

Yes, I want to prevent d) from occuring. Otherwise, any attacker could fake
an email like:

        from: presidentimportant-company.com (say, a bank)
        to: presidentmycompany.com

There must be a way to block such a case...

I'm just curious what has Wietse to say, as Postfix's creator, about this...
:-)

Martin