TIP: Click on subject to list as thread! ANSI
echo: fidosoft.husky
to: Markus Reschke
from: mark lewis
date: 2015-03-14 11:40:26
subject: Unpacking insecure arcmail

On Sat, 14 Mar 2015, Markus Reschke wrote to Kai Richter:

 KR> If you need that feature (toss unsec packed NM) only for that node 
 KR> you could achive that by using a hotfix dirty hack and setup 
 KR> passwords for that node for both mailer connect and packet 
 KR> password. The password system was designed to seperate between 
 KR> unsecure and secure but you can misuse it to accept unsecured NM 
 KR> from one special node.

 MR> It's common practice to send raw/unpacked netmail packets to a 
 MR> node you got no link with.

it is also common practise for nodes to pack all mail into bundles no
matter the destination...

 MR> And this makes perfectly sense when you consider known security 
 MR> issues. Some nodes simply ignore and discard packed netmail from 
 MR> non-links for that reason. I thought this is all well known.

ignoring and discarding is ok... however some people (eg: NCs) want to
process insecure /netmail/ automatically so that (eg:) new node
applications are not lost or days or weeks... other tossers that created
and implemented secure and insecure directories offer an option to process
insecure /netmail/... that means that they inspect insecure bundles,
extract PKTs containing netmail and toss only those netmail messages into
the proper netmail area... this is old school from the 90s, folks...

)\/(ark

* Origin: (1:3634/12)
SEEN-BY: 11/201 34/999 90/1 116/18 120/331 123/500 1406 128/187 135/364 140/1
SEEN-BY: 218/700 222/2 226/0 160 230/150 240/1120 249/303 250/1 261/38 100
SEEN-BY: 266/404 1413 267/155 280/464 1027 282/1031 1056 292/907 908 311/2
SEEN-BY: 320/119 340/400 393/68 396/45 633/267 280 640/384 712/101 550 848
SEEN-BY: 770/1 801/161
@PATH: 3634/12 123/500 261/38 712/848 633/267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.