Penalty timeout bug in pop3d
    Pascal Gienger 
    Pascal.Gienger at uni-konstanz.de
       
    Mon Sep 17 08:00:37 EDT 2007
    
    
  
Hi,
was there a special reason to "forget" the sleep(3) penalty timeout after 
an "invalid user" auth nak message?
I did that because we had a POP3 client running wild while trying out 
unknown sasl users...
# diff pop3d.c.orig pop3d.c
1220d1219
<       prot_printf(popd_out, "-ERR [AUTH] Invalid user\r\n");
1223a1223,1224
>       sleep(3);
>       prot_printf(popd_out, "-ERR [AUTH] Invalid user\r\n");
Pascal
    
    
More information about the Info-cyrus
mailing list