TID: Mystic BBS 1.12 A48
MSGID: 2:201/137 f3a55040
REPLY: 2:201/137 678bab0a
TZUTC: 0100
Hello again, g00r00!

On 22 Mar 2022, Bj”rn Wiberg said the following...
 BW> I just noticed that if I set:
 BW> Post ACS    ³ !fa
 BW> ...on the ID 1 (email) message base, that prevents users having that
 BW> flag from posting from within the BBS, but it does not stop them from
 BW> posting emails via POP3. The POP3 server happily accepts the messages

Of course I meant "SMTP", not POP3. :o)

I do realize that SMTP on the suggested default port (25) is usually meant for
message transfers between MTAs (and should not require STARTTLS if the server
is publicly referenced, as per RFC 3207 section 4), not message submissions by
MSAs (which often use port 587 and must require authentication as per RFC 6409
section 4.3).

So I guess it depends on the purpose which port should be used, whether
STARTTLS should be required or not, and whether authentication should be
required or not...


Speaking of ACSes and (for real, now!) POP3, I also noticed that the POP3
server appears to let a user list and retrieve messages, respectively, even
though the corresponding List ACS and Read ACS for the email message base are
not fulfilled (which usually restrict this from within the BBS).


Just thought I would mention this in case you think that this access checking
should be added to those two MIS servers.

As usual, thank you for your time and consideration!

Best regards
Bj”rn

--- Mystic BBS v1.12 A48 2022/03/11 (Linux/64)
 * Origin: Star Collision BBS, Uppsala, Sweden (2:201/137)
SEEN-BY: 1/123 15/0 90/1 103/705 105/81 106/201 114/705 120/340 123/120
SEEN-BY: 123/131 124/5016 129/305 330 331 153/757 7715 154/10 201/0
SEEN-BY: 201/137 203/0 124 218/700 840 220/70 221/0 1 6 226/17 30
SEEN-BY: 226/100 227/114 229/110 206 307 317 400 424 426 428 452 550
SEEN-BY: 229/664 700 230/0 240/1120 5832 250/5 8 266/512 267/800 280/464
SEEN-BY: 280/5003 282/1038 292/854 8125 298/25 301/1 113 305/2 3 317/3
SEEN-BY: 320/219 322/757 335/364 341/66 234 342/200 396/45 460/58
SEEN-BY: 633/280 712/848 770/1 2452/250 3634/24 4500/1 5020/1042 5058/104
PATH: 201/137 0 203/0 280/464 301/1 221/6 218/840 770/1 317/3 229/426