OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: connect to transport exploit?

From: /dev/rob0 (rob0gmx.co.uk)
Date: Mon Aug 28 2006 - 14:46:15 CDT


On Monday 28 August 2006 14:31, Joe Auty wrote:
> As it turns out, it looks like this problem has gone away, and I
> believe went away once Postgrey cleaned up its logs. Sorry, I wasn't
> really thinking about this problem as a Postgrey or Amavisd-new
> problem, but I guess I should have since they are both only content
> filters that I believe maintain their own queues.

Um, no. Postgrey is a policy service, which means it runs before DATA.
At that point there is nothing to queue, no content to filter.

Amavisd-new is indeed a content filter, but each instance only handles
one message at a time, and anything to be delivered is typically
returned to a reinjection port and requeued in Postfix.
--
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header