3 messages in net.sourceforge.lists.courier-sqwebmailRe: [sqwebmail] Checking SENDITSH in ...
FromSent OnAttachments
Pawel TeczaSep 3, 2007 6:18 am 
Sam VarshavchikSep 3, 2007 9:11 am 
Pawel TeczaSep 3, 2007 10:53 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [sqwebmail] Checking SENDITSH in multiple front-ends environmentActions...
From:Sam Varshavchik (mrs@courier-mta.com)
Date:Sep 3, 2007 9:11:12 am
List:net.sourceforge.lists.courier-sqwebmail

Pawel Tecza writes:

As you can see above, you check stats of the _local_ SENDITSH file. I can understand that it's simple protection against malicious attack. I agree that it can work, however assuming that a webmail always runs on only _one_ machine.

In our environment it's not true and sometimes a redirect hash is not veryfied properly, because a DNS server directs a user to another front-end.

Could you please fix it? I think you can add any variable to a webmail configuration file instead of checking stats of SENDITSH file. What's your opinion?

This is reasonable. I'm going to check if SQWEBMAIL_RANDSEED is set, if not use the inode as the default.