Re: Attacks using pop

On Tue, 4 Jun 1996 simes_at_tcp.co.uk wrote:

> Thist really depends on the POP3 server you are using. It should really
> just read directly from the .pop file and ignore the actual mailbox.
> Certainly, this is how the POP3 server we have works. I would say that
> any POP3 server that appends the .pop file back onto the mail box itself
> when it loses the connection to the POP3 client is broken.

The pop server in question was Qualcomm's 2.1.4 qpopper as well as
an older pop server.

Qualcomm's 2.2 server has a server mode compilation switch which inhibits
this bbehaviour. I installed it overnight and there seem to be no
problems so far. As well as curing the server problem it disconnects
after 1 failed login attempt.

AB
Received on Jun 04 1996