HI ROy,



 RW>> AS you said before, they would be able to produce mail, but not
 RW>> route it. This is why we have session and packet passwording.

 >> They can crash it. Someone has already shown how a netmail packet
 >> can be dropped on any system that might be in a route and the
 >> netmail will be sent to the system intended. No session or packet
 >> password required.

 RW> Depends on how your mail processing works.  Iow how you've got it
 RW> configured. Squish for example can be set up rather strictly in this
 RW> regard, especially when coupled with binkleyterm.

> That's true. However, one only needs to find on link in the route
> that isn't so configured.

true again, but iirc back in the day when everybody was pots folks who
didn't were soon educated that they should. we all know of the horror
stories of folks planting mail spoofing that they were someone else etc.
WOn't mention names but I remember one case.  I think he went after JOhn
S> at SOuthern star there for awhile, and was able to do so because of
insecure systems iirc.


Regards,
           Richard
--- timEd 1.10.y2k+