Penalty timeout bug in pop3d

Pascal Gienger Pascal.Gienger at uni-konstanz.de
Mon Sep 17 08:00:37 EDT 2007


Hi,

was there a special reason to "forget" the sleep(3) penalty timeout after 
an "invalid user" auth nak message?

I did that because we had a POP3 client running wild while trying out 
unknown sasl users...

# diff pop3d.c.orig pop3d.c
1220d1219
<       prot_printf(popd_out, "-ERR [AUTH] Invalid user\r\n");
1223a1223,1224
>       sleep(3);
>       prot_printf(popd_out, "-ERR [AUTH] Invalid user\r\n");

Pascal


More information about the Info-cyrus mailing list