From: Russ Allbery (rra@stanford.edu)
Date: Mon Jul 05 2004 - 22:07:23 CDT
Charles Lindsey <chl@clerew.man.ac.uk> writes:
> But how likely is it that a user who does not understand the
> significance of 'cmsg' will just "happen" to write a Subject which
> starts with "cmsg" and is followed by a valid cancel message for a
> genuine article.
You still seem to be under a significant misapprehension concerning the
nature of this problem. All that is necessary is that the Subject header
begin with "cmsg" and a space. The remainder of the Subject header need
not resemble in any respect a valid control message; just beginning with
"cmsg" and a space will be sufficient to cause the message to effectively
disappear at many sites or be rejected (namely any site running any
version of INN prior to 2.4).
-- Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>