[Bro] MAIL FROM in smtp.bro
rpang at cs.princeton.edu
Fri Sep 29 07:13:02 PDT 2006
I don't remember either (Vern: I was about to ask you about it. :). I
think it should be fine to uncomment the code. Please let me know if
you have any problem after uncommenting it.
On 9/29/06, Vern Paxson <vern at icir.org> wrote:
> > I was wondering why the following code is commented out of smtp.bro?
> > ...
> > in policy/smtp.bro
> > 508 # else if ( cmd == "MAIL" && code == 250 )
> > 509 # smtp_command_mail(session, cmd_info);
> Huh, I don't know what's up with that. I've cc'd Ruoming (who I believe
> wrote the original smtp.bro) in case he recalls.
More information about the Bro