Enforcing NNTP-Posting-Host

Julien ÉLIE julien at trigofacile.com
Mon Apr 14 18:13:33 UTC 2008


Hi,

Do you think it is a good idea to allow the setting of NNTP-Posting-Host?
Normally, it should be the IP of the client, even if it is private...

If yes, what do you think of reusing the addnntppostinghost: parameter
in inn.conf? (true/false/"something to directly put")

Julien

----- Message d'origine ----- 
De : "Steve" <steve at mixmin.net>
Groupes de discussion : news.software.nntp
Envoyé : lundi 14 avril 2008 13:19
Objet : Re: Cleanfeed bad hosts central


> On Sat, 12 Apr 2008 08:16:29 +0200, Julien ÉLIE wrote in
> Message-Id: <ftpk3u$uk2$1 at news.trigofacile.com>:
>
>>> I think 192.168.1.100 is a internal ip :-)
>>
>> Sure but it is allowed in NNTP-Posting-Host:, isn't it?
>> (If someone only has a private IP, it is its NNTP-Posting-Host.)
>
> I run an INN service on a NAT'ed private address but rewrite the
> NNTP-Posting-Host header to the Internet facing address. This currently
> involves using a filter_nnrpd.pl script.  It would be more practical if
> there was a config option on the server to hardcode the address in
> NNTP-Posting-Host / X-Trace headers.
>
> -- 
> pub   1024D/228761E7 2003-06-04 Steven Crook
>      Key fingerprint = 1CD9 95E1 E9CE 80D6 C885  B7EB B471 80D5 2287 61E7
> uid                  Steven Crook <steve at mixmin.net> 



More information about the inn-workers mailing list