7 Jun
2011
7 Jun
'11
4:57 p.m.
On Tue, 2011-06-07 at 08:52 -0500, Matt Brookings wrote:
/*vpopmail 5.4 does not understand IPv6*/if (!(strcmp(host, "::1")))host = "127.0.0.1";Does this code really matter? Wouldn't SMTP relay be open from localhost always anyway?
Unfortunately, the 5.4 branch does not understand "::1" as the loopback, and it parses the value incorrectly, leading to an open relay situation. Not all systems allow localhost to relay via SMTP without authentication.
Doesn't it also mean that if someone connects via a remote IPv6 address, it again leads to open relay? How about the attached patch instead?