NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] smtp security server problems with FP3



Greetings!

Alberto wrote:

I've the same problem... It's with e-mails with To: field larger than 1 kbyte. I'ver been told it's a bug, but CP support doesn't give you the patch if you only have software subscription.

since we've upgraded our 4.1 to NG FP3 some users report that
mails that come from mailing-lists are destroyed.
I think that have something to do with the mail-header size.
How can solve this problem ?

I think, this behaviour is okay as Internet-STD0010 = RfC 821 (SMTP) defines a maximum text line length (applies to headers too, if I am not mistaken). I'd be inclined to blame the mailing list software for that.

From the RFC:

 4.5.3.  SIZES
         There are several objects that have required minimum maximum
         sizes.  That is, every implementation must be able to receive
         objects of at least these sizes, but must not send objects
         larger than these sizes.

text line

               The maximum total length of a text line including the
               <CRLF> is 1000 characters (but not counting the leading
               dot duplicated for transparency).

recipients buffer

               The maximum total number of recipients that must be
               buffered is 100 recipients.



So CKP is overfulfilling it with 1023 chars (probably 1024 chars incl.
\0). The number of recipients will be(come) a problem if exceeding 100
recipients per single mailrun/message.

Any decent mailing list software (alas, those I know) can handle these
restrictions, most often configurable and usually by default sorting by
recipient domain for traffic optimization. In fact, most I know of use
batches of 30-60 recipients per mail, so well below above mentioned limit.


Volker Tanger IT-Security Consulting

--

discon gmbh
Wrangelstraße 100
D-10997 Berlin

Telefon  (030) 6104-3307
Telefax  (030) 6104-3461

[email protected]
http://www.discon.de/

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.