[Bro] MAIL FROM in smtp.bro

Ruoming Pang rpang at cs.princeton.edu
Fri Sep 29 07:13:02 PDT 2006


I don't remember either (Vern: I was about to ask you about it. :). I
think it should be fine to uncomment the code. Please let me know if
you have any problem after uncommenting it.

Thanks,
Ruoming

On 9/29/06, Vern Paxson <vern at icir.org> wrote:
> > I was wondering why the following code is commented out of smtp.bro?
> > ...
> >
> > in policy/smtp.bro
> >
> >    508          #       else if ( cmd == "MAIL" && code == 250 )
> >    509          #               smtp_command_mail(session, cmd_info);
>
> Huh, I don't know what's up with that.  I've cc'd Ruoming (who I believe
> wrote the original smtp.bro) in case he recalls.
>
>                 Vern
>



More information about the Bro mailing list