TIP: Click on subject to list as thread! ANSI
echo: fidosoft.husky
to: Alan Ianson
from: Kai Richter
date: 2021-04-25 16:03:00
subject: Netmail in the insecure i

Hello Alan!

24 Apr 21, Alan Ianson wrote to Kai Richter:

 AI> Netmail that arrives uncompressed is tossed from the insecure
 AI> directory.

There your solution is. Get the netmail uncompressed.

 AI> If echomail is found it should be so, if netmail is found it should be
 AI> tossed?

Tossing uncompressed insecure netmail is the lowest level to establish first communication with the other sysop. It needs to work on any system.

Even if your mailer log told you that you are connecting to a linux binkd that doesn't force the tosser to be on a linux machine. Some systems are sharing the inbound to another system where the tosser works. You have no idea if the other side can handle the compression format that you use. You need to find a minimum standard and the easiest minimum standard is no compression.

 AI>>> I wonder if it is possible for hpt to unpack those arcmail
 AI>>> bundles and toss the packets within if they are netmail.

 KR>> Yes, it is. Negotiate a password with the sending sysop.

 AI> I get/send netmail to/from that node periodically. I would be happy to
 AI> link with that node if there was any reason to.

There is. A periodical link should be secured. Negeotation with the other sysop would set your passwords, the compression format and the route. I recommend to set a private nodelist too, just to avoid any further troubles with the official nodelist.

 AI> We only exchange netmail once in a while so we have never setup a
 AI> secure link.

This would work without any issues if the sender disables netmail compression.

 AI> This sysop, I suspect just wanted to test the route on the return
 AI> trip. No need to talk about that.

Then what is this for? Why should someone do a connect if there is nothing to talk? There is no need to build a road if nobody travels. Paths build up because many are going in the same direction.

As far as i noticed there was a testing run by someone visible at enet.sysop. According to my logfiles i was effected too. I received a netmail from a point system that was destinated to another point system. Why?? If we all throw our mails to anyone how could we believe that it would ever reach it's destination? This sysop simply wasted our time because he didn't use the standard secured routing. And he doesn't know the networks structure and function of hosts. From my point of view he does need someone to talk and who gives an introduction for ftn based networks.

 AI> Unless there is a problem

The problem is unsecured inbound compressed netmail.

 AI> and if there is I would like to get to work on the solution.

The solution is turn off compression and/or turn off not necessary tests.

Regards

Kai

--- GoldED+/LNX 1.1.4.7
                                                                           
* Origin: Monobox (2:240/77)

SOURCE: echomail via QWK@pharcyde.org

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.