OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: SMTP-SASL auth failure caching.

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Sat Dec 01 2007 - 20:32:43 CST


On Sat, Dec 01, 2007 at 10:43:53PM +0000, Keean Schupke wrote:

> have added a dsn_valid() check, and swapped to using strtoul, along
> with unsigned long for all time values... no negative times.

In http://tools.ietf.org/html/rfc4954#section-6, the enhanced status
code for AUTH failures is defined as:

    535 5.7.8 Authentication credentials invalid

which extends:

    http://tools.ietf.org/html/rfc3463#section-3.8

which only defines 5.7.0-5.7.7

It may be appropriate to further check the enhanced status code (if
present) and skip responses where 535 is accompanied by an enhanced
status code other than 5.7.8. On the other hand, the 535 response is not
currently supposed to be accompanied by any other enhanced status code,
so this may be too pedantic.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.