Bugtraq mailing list archives
Re: NTmail and VRFY
From: georger () NLS NET (Geo.)
Date: Wed, 1 Dec 1999 15:42:19 -0500
Just as a followup to this. In NTmail 5 (which was fresh out of beta this month) this does fix things and turns VRFY off, however in NTmail 4.3c it is broken and does nothing. Johns from gordano confirmed this to me a short while ago. Geo.
-----Original Message----- From: Bugtraq List [mailto:BUGTRAQ () SECURITYFOCUS COM]On Behalf Of NTMail Support Sent: Wednesday, December 01, 1999 10:40 AM To: BUGTRAQ () SECURITYFOCUS COM Subject: Re: NTmail and VRFY George, Many thanks for raising the issue of the VRFY command with NTMail. I can confirm: a. That the option in the GUI does not switch the VRFY command on and off. And that this has been raised as an Observation Report to be fixed in the next release of NTMail. b. To switch of the VRFY command, select "Support > System Variables" and choose the "AllowVRFY" variable from the drop-down. Set this to the value 0 and press "Change Value". You will now see the response: 558 VRFY not allowed. We welcome comments on any security issues with NTMail. The usual procedure is to direct issues to support () gordano com. Brian
Current thread:
- Re: NTmail and VRFY NTMail Support (Dec 01)
- Re: NTmail and VRFY Geo. (Dec 01)