[leafnode-list] Re: Disabling The "Is Valid FQDN" Check

Adam Funk a24061 at ducksburg.com
Tue May 10 22:15:28 CEST 2011


On 2011-05-10, Matthias Andree wrote:
> Am 10.05.2011 14:43, schrieb Adam Funk:
>> On 2011-05-09, Matthias Andree wrote:

>>> Unfortunately, depending on software installation, yes, newsd is one
>>> example.  Leafnode 2 blacklists several software installations for
>>> posting by pretending that the server's response had been "201 Posting
>>> not allowed" when it got 200 in fact.
>>
>> Is that hard-coded in the source code somewhere?
>
> Yes, it is. 

Oh, I found it.  I've never encountered this problem, but the log
messages in the source code look informative.  (Nice work again!)


> I don't want script kiddies to wreak havoc in Usenet, so I 
> don't make that configurable (you can already set "nopost = 1" in 
> leafnode 1 and feedtype = none in leafnode 2).

Good point.  (I guess anyone who can modify the source code or write a
program to take advantage of that vulnerability doesn't count as a
S.K.)




More information about the leafnode-list mailing list