[LBBS-52] net_smtp: Add limited support for VRFY and EXPN
Limited support for the VRFY and EXPN commands, which are generally not implemented due to being considered security issues, would be somewhat nice.
Limited support meaning the commands are only available to:
- authenticated users
- (or) whitelisted IP addresses of trusted hosts (one of the 3 groups already used for trusting certain hosts for various purposes)
VRFY could be used as a standard way for something external to the mail server to determine if a mailbox exists. Not too dissimilar to Finger / SYSSTAT, but via SMTP. EXPN could be useful to dump the contents of a mailing list, for debugging or other purposes, since there's not really another mechanism to do this.
Comments
You must be logged in to leave a comment.