On Wed, 15 Sep 2004 10:24:31 -0500 (CDT), Adam Maloney <adam at whee.org> wrote:
> > > I have NEVER seen an active server that supports VRFY.
> >
> > I'd say one in five of my clients support it. The last client I tested
> > supported it, actually.
> 
> IIRC, it wasn't off by default in Sendmail until around 8.9 or 8.10.
> 
> O PrivacyOptions=goaway
> O PrivacyOptions=noexpn,novrfy

I don't believe it's off by default in MS Exchange, either, which is
where many of my clients have this vulnerability.

_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
Help beta test TCLUG's potential new home: http://plone.mn-linux.org
Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery
tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list