[12799] in bugtraq
Re: NTmail and VRFY
daemon@ATHENA.MIT.EDU (NTMail Support)
Wed Dec 1 14:50:03 1999
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Message-Id: <3.0.1.32.19991201153956.01d68c70@194.205.1.152>
Date: Wed, 1 Dec 1999 15:39:56 +0000
Reply-To: NTMail Support <support@NTMAIL.CO.UK>
From: NTMail Support <support@NTMAIL.CO.UK>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <3.0.32.19991201143613.01ae7b30@194.205.1.152>
George,
Many thanks for raising the issue of the VRFY command with NTMail.
I can confirm:
a. That the option in the GUI does not switch the VRFY command on and off.
And that this has been raised as an Observation Report to be fixed in
the next release of NTMail.
b. To switch of the VRFY command, select "Support > System Variables" and
choose the "AllowVRFY" variable from the drop-down. Set this to the
value 0 and press "Change Value". You will now see the response:
558 VRFY not allowed.
We welcome comments on any security issues with NTMail. The usual
procedure is to direct issues to support@gordano.com.
Brian
