Re: Attacks using pop

Alan Brown said
>
>If the collecting client times out, the ~/user.pop is appended back onto
>~/user. If the client times out while the .user.pop file is being
>built, ~/user isn't zeroed but ~/.user.pop is still appended

Thist really depends on the POP3 server you are using. It should really
just read directly from the .pop file and ignore the actual mailbox.
Certainly, this is how the POP3 server we have works. I would say that
any POP3 server that appends the .pop file back onto the mail box itself
when it loses the connection to the POP3 client is broken.

--
Simon Burr                         | SysAdmin and Programmer, TCP Ltd
simes@tcp.net.uk/simes@bofh.org.uk | http://www.tcp.co.uk/staff/simes/
          I *don't* speak for my company, my boss does that
             cd /pub/lunch || dd if=/dev/zero of=/dev/mem