Subj : src/sbbs3/rechocfg.c sbbs
To   : Bill Mcgarrity
From : Digital Man
Date : Sat May 28 2016 10:16:00

  Re: src/sbbs3/rechocfg.c sbbsecho.c sbbsecho.h
  By: Bill McGarrity to rswindell on Mon May 09 2016 12:48 pm

 >   Re: src/sbbs3/rechocfg.c sbbsecho.c sbbsecho.h
 >   By: rswindell to CVS commit on Mon May 09 2016 02:28:44
 >
 > Hiya Rob...
 >
 >  rs> Modified Files:         rechocfg.c sbbsecho.c sbbsecho.h Log Message:
 >  rs> Introduced sbbsecho.ini advanced setting (not yet exposed in
 >  rs> echocfg): StrictPacketPasswords (default is "true"). If you want
 >  rs> SBBSecho v3 to behave like SBBSecho v2 with regards to packet
 >  rs> passwords for linked-nodes with *no* configured packet password, set
 >  rs> this value to "true" in your sbbsecho.ini file. I don't recommend
 >  rs> doing this if you care about the "security" of your echomail, but
 >  rs> some sysops have been bitten by the strict enforcement of the
 >  rs> configured password in SBBSecho v3.
 >
 > Just so I get this straight... if we want to accept the new feature in
 > sbbsecho for strict pkt passwords protection then toggle this to "false".
 > Correct??

No, strict is the default behavior of SBBSecho v3. It was the *only* behavior
of SBBSecho v3 before this morning, but apparently there's some confused
FidoNet sysops out there sending out password-protected packets and not
realizing it. So this little option will allow you to use the old, less-secure,
SBBSecho v2 method of password packet validation:

If StrictPacketPasswords = true (the default), then the password in the packet
must match whatever you (the receiving end) has configured in your sbbsecho.ini
for the linked node. Just as it was in the initial SBBSecho v3 commits to CVS.

If StrictPacketPasswords = false, then the password in the packet is only
compared if the linked node has a password set in your (the receiving end's)
sbbsecho.ini file. I don't recommend using this mode if you care about echomail
security.

                                            digital man

Synchronet "Real Fact" #34:
The irc.synchro.net network has more servers than users.
Norco, CA WX: 67.2øF, 62.0% humidity, 7 mph ESE wind, 0.00 inches rain/24hrs
---
 þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net
i
 þ RNET 2.10U: ILink: Techware BBS þ Los Angeles, Ca þ www.techware.dynip.com

--- QScan/PCB v1.20a / 01-0462
 * Origin: ILink: CFBBS | cfbbs.no-ip.com | 856-933-7096 (454:1/1)

.