Re: [cobalt-security] HEY COBALT, poprelay needs fixing, patch has been posted

[cpaul <inc@xxxxxxxxxxxxx>]

>>a way simple code fix has been posted to the list for poprelayd,
>>can we have a package please!

>If you admit that the code fix is 'simple', why do you need a 
>package?
>Just go fix the thing if you're worried about security...


i did go fix the thing, but wouldn't it would be nice to have
that patch verified by cobalt, or by others on the list at least?

given that your server stands to be blackholed if folks gets
spammed via this exploit, it's important that a user-friendly
solution such as a package gets out into the raq community asap!

imho, of course.

let's not even go into the 12 months+ that it took for cobalt to
get this poprelayd package working properly in the first place.

"tell your customers to use their isp's smtp server" - yeah right!



--
chris paul, relaxing back into the lotus position :)