[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[leafnode-list] Re: Disabling The "Is Valid FQDN" Check
On 2011-05-10, Matthias Andree wrote:
> Am 10.05.2011 14:43, schrieb Adam Funk:
>> On 2011-05-09, Matthias Andree wrote:
>>> Unfortunately, depending on software installation, yes, newsd is one
>>> example. Leafnode 2 blacklists several software installations for
>>> posting by pretending that the server's response had been "201 Posting
>>> not allowed" when it got 200 in fact.
>>
>> Is that hard-coded in the source code somewhere?
>
> Yes, it is.
Oh, I found it. I've never encountered this problem, but the log
messages in the source code look informative. (Nice work again!)
> I don't want script kiddies to wreak havoc in Usenet, so I
> don't make that configurable (you can already set "nopost = 1" in
> leafnode 1 and feedtype = none in leafnode 2).
Good point. (I guess anyone who can modify the source code or write a
program to take advantage of that vulnerability doesn't count as a
S.K.)
--
_______________________________________________
leafnode-list mailing list
leafnode-list@xxxxxxxxxxxxxxxxxxxxxxxxxxxx
https://www.dt.e-technik.uni-dortmund.de/mailman/listinfo/leafnode-list
http://leafnode.sourceforge.net/