Re: SMTP Smuggling
Sam Varshavchik <[email protected]>
| Newsgroups | gmane.mail.imap.courier.general |
|---|---|
| Message-ID | <[email protected]> |
Christoph Mitasch via courier-users writes: > « HTML content follows > > Hello, > > > > is Courier MTA affected by the new SMTP smuggling attack? > > <URL:https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails- > worldwide/>https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e- > mails-worldwide/ Nope, I see no issues here. Courier accepts either CRLF or LF as end of line sequence on inbound mail, and correctly un-dot-stuffs the message. On the outbound side Courier always uses CRLF, and always dot-stuff the message's contents. This is elementary SMTP. Any attempt to use Courier to leverage this exploit will fail. _______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
signature.asc
(application/pgp-signature, 228 B)
-----BEGIN PGP SIGNATURE----- iHUEABYKAB0WIQRupkKLJP96aW75pIOKYPgoojZS4gUCZaaC3wAKCRCKYPgoojZS 4rPJAQCxOp+P14dTITjFWcGcAgNLIlED67kHbAD/DfPDZjr9TgEAw7e++iW+ybME 6YTj7p8i8F0ef08hNj9cDLbVZ7B6HQc= =Il6H -----END PGP SIGNATURE-----