Subj : Re: src/sbbs3/rechocfg.c To : Digital Man From : Bill Mcgarrity Date : Sat May 28 2016 10:16:00 -=> Digital Man wrote to Bill McGarrity <=- DM> Re: src/sbbs3/rechocfg.c sbbsecho.c sbbsecho.h DM> By: Bill McGarrity to rswindell on Mon May 09 2016 12:48 pm > Re: src/sbbs3/rechocfg.c sbbsecho.c sbbsecho.h > By: rswindell to CVS commit on Mon May 09 2016 02:28:44 > > Hiya Rob... > > rs> Modified Files: rechocfg.c sbbsecho.c sbbsecho.h Log Message: > rs> Introduced sbbsecho.ini advanced setting (not yet exposed in > rs> echocfg): StrictPacketPasswords (default is "true"). If you want > rs> SBBSecho v3 to behave like SBBSecho v2 with regards to packet > rs> passwords for linked-nodes with *no* configured packet password, set > rs> this value to "true" in your sbbsecho.ini file. I don't recommend > rs> doing this if you care about the "security" of your echomail, but > rs> some sysops have been bitten by the strict enforcement of the > rs> configured password in SBBSecho v3. > > Just so I get this straight... if we want to accept the new feature in > sbbsecho for strict pkt passwords protection then toggle this to "false". > Correct?? DM> No, strict is the default behavior of SBBSecho v3. It was the *only* DM> behavior of SBBSecho v3 before this morning, but apparently there's DM> some confused FidoNet sysops out there sending out password-protected DM> packets and not realizing it. So this little option will allow you to DM> use the old, less-secure, SBBSecho v2 method of password packet DM> validation: DM> If StrictPacketPasswords = true (the default), then the password in the DM> packet must match whatever you (the receiving end) has configured in DM> your sbbsecho.ini for the linked node. Just as it was in the initial DM> SBBSecho v3 commits to CVS. DM> If StrictPacketPasswords = false, then the password in the packet is DM> only compared if the linked node has a password set in your (the DM> receiving end's) sbbsecho.ini file. I don't recommend using this mode DM> if you care about echomail security. Thank you for the clarification. When I first read your explanation above it seemed it was reverse logic. I just wanted to make sure before I processed it. Thanks again... -- Bill Telnet: tequilamockingbirdonline.net Web: bbs.tequilamockingbirdonline.net:81 FTP: ftp.tequilamockingbirdonline.net:2121 IRC: irc.tequilamockingbirdonline.net Ports: 6661-6670 SSL: +6697 Radio: radio.tequilamockingbirdonline.net:8010/live .... Look Twice... Save a Life!!! Motorcycles are Everywhere!!! --- MultiMail/Win32 v0.50 þ Synchronet þ TequilaMockingbird Online - Toms River, NJ þ wcQWK 7.0 ÷ ILink * Omicron Theta * Southaven MS * winserver.org --- QScan/PCB v1.20a / 01-0462 * Origin: ILink: CFBBS | cfbbs.no-ip.com | 856-933-7096 (454:1/1) .