qmail Replaces Dots (.) in Extension Addresses with Colons (:)
|
| < Free Open Study > |
|
This is another security feature. The purpose is to prevent extension addresses from backing up the file tree using ... Without this restriction, a malicious user could attempt a delivery to joe-../jane/foo@example.com hoping to attempt delivery via the dot-qmail file ~joe/.qmail-/../jane/foo-perhaps disclosing the contents of ~jane/foo in the form of a bounce message. By replacing dots with colons, qmail ensures that all dot-qmail files for a user are under their home directory. This is documented in the qmail-local man page.
|
| < Free Open Study > |
|
