🚀 go-pugleaf

kanagn@athina.cc.uch.gr (Kostas Anagnostakis) writes:
>Hello security freaks,
>
>  I had an idea I would like to share with you. Why not implement SMTP
>  allowing only connections from PRIVILEGED ports. As far as I have gone
>  into the matter, this would be a solution because a normal user is
>  not able to use a socket port < 1000 so his attempt to connect to
>  a SMTP server will fail.

Because priviledged ports aren't really priviledged. Besides, anyone
on the net who has root access on a unix box, or a PC they run, or
what have you, could still forge mail.

>  If someone wishes to start working on the idea, I would like to help.

Its not like it would be a lot of work; we are talking about 10 or 20
of lines of code here, even being generous. Its just that this doesn't
actually solve the problem.

--
Perry Metzger		pmetzger@shearson.com
--
		  Just say "NO!" to death and taxes.
			 Extropian and Proud.