[prev in list] [next in list] [prev in thread] [next in thread]
List: inn-workers
Subject: Re: mailpost uses inews: Bad?
From: "Felix E. Klee" <felix.klee () inka ! de>
Date: 2004-12-21 0:02:58
Message-ID: 87oegor00d.wl%felix.klee () inka ! de
[Download RAW message or body]
At Sun, 19 Dec 2004 19:28:31 -0800,
Russ Allbery wrote:
> > Now I wonder why INN's mailpost *does* use inews. Is it safe to replace
> > it with rnews (which I tried, BTW, and it worked fine, AFAICS)?
>
> inews doesn't do nearly as many checks as it used to, so this concern is
> somewhat out of date for INN's inews at least.
I see.
However, some time ago, I changed mailpost to use rnews, and this works
fine.
> It does, however, still sometimes do a few checks that one might not
> like. (It also does checks that one may *want*, like making sure that
> control messages don't sneak through the gateway.)
The latter point is indeed of interest. I wonder whether it is
definitely possible to manipulate the server by gating messages via
rnews in mailpost, or whether this is only an issue in case of security
flaws. I may check that once I find the time.
> I've checked in a new manual page that's significantly updated and fleshed
> out and should provide more detail about just what inews does.
Thanks very much.
> You have to set checkincludedtext to true in inn.conf; it's not the
> default. If it's set, just try posting an article longer than 40 lines
> with more quoted text than original text.
That's good to know.
Felix
PS:
Fishy (literally) pending Decision on Software Patents in the EU:
http://demo.ffii.org/
Please participate in the Web Demo with a banner and register your site.
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic