Penalty timeout bug in pop3d
Pascal Gienger
Pascal.Gienger at uni-konstanz.de
Mon Sep 17 08:00:37 EDT 2007
Hi,
was there a special reason to "forget" the sleep(3) penalty timeout after
an "invalid user" auth nak message?
I did that because we had a POP3 client running wild while trying out
unknown sasl users...
# diff pop3d.c.orig pop3d.c
1220d1219
< prot_printf(popd_out, "-ERR [AUTH] Invalid user\r\n");
1223a1223,1224
> sleep(3);
> prot_printf(popd_out, "-ERR [AUTH] Invalid user\r\n");
Pascal
More information about the Info-cyrus
mailing list