TID: Mystic BBS 1.12 A48   
   MSGID: 2:201/137 f3a55040   
   REPLY: 2:201/137 678bab0a   
   TZUTC: 0100   
   Hello again, g00r00!   
      
   On 22 Mar 2022, Bj”rn Wiberg said the following...   
    BW> I just noticed that if I set:   
    BW> Post ACS    ³ !fa   
    BW> ...on the ID 1 (email) message base, that prevents users having that   
    BW> flag from posting from within the BBS, but it does not stop them from   
    BW> posting emails via POP3. The POP3 server happily accepts the messages   
      
   Of course I meant "SMTP", not POP3. :o)   
      
   I do realize that SMTP on the suggested default port (25) is usually meant for   
   message transfers between MTAs (and should not require STARTTLS if the server   
   is publicly referenced, as per RFC 3207 section 4), not message submissions by   
   MSAs (which often use port 587 and must require authentication as per RFC 6409   
   section 4.3).   
      
   So I guess it depends on the purpose which port should be used, whether   
   STARTTLS should be required or not, and whether authentication should be   
   required or not...   
      
      
   Speaking of ACSes and (for real, now!) POP3, I also noticed that the POP3   
   server appears to let a user list and retrieve messages, respectively, even   
   though the corresponding List ACS and Read ACS for the email message base are   
   not fulfilled (which usually restrict this from within the BBS).   
      
      
   Just thought I would mention this in case you think that this access checking   
   should be added to those two MIS servers.   
      
   As usual, thank you for your time and consideration!   
      
   Best regards   
   Bj”rn   
      
   --- Mystic BBS v1.12 A48 2022/03/11 (Linux/64)   
    * Origin: Star Collision BBS, Uppsala, Sweden (2:201/137)   
   SEEN-BY: 1/123 15/0 90/1 103/705 105/81 106/201 114/705 120/340 123/120   
   SEEN-BY: 123/131 124/5016 129/305 330 331 153/757 7715 154/10 201/0   
   SEEN-BY: 201/137 203/0 124 218/700 840 220/70 221/0 1 6 226/17 30   
   SEEN-BY: 226/100 227/114 229/110 206 307 317 400 424 426 428 452 550   
   SEEN-BY: 229/664 700 230/0 240/1120 5832 250/5 8 266/512 267/800 280/464   
   SEEN-BY: 280/5003 282/1038 292/854 8125 298/25 301/1 113 305/2 3 317/3   
   SEEN-BY: 320/219 322/757 335/364 341/66 234 342/200 396/45 460/58   
   SEEN-BY: 633/280 712/848 770/1 2452/250 3634/24 4500/1 5020/1042 5058/104   
   PATH: 201/137 0 203/0 280/464 301/1 221/6 218/840 770/1 317/3 229/426