• It appears that sbbsecho will forward netmail between domains

    From Deucе@1:103/705 to GitLab issue in main/sbbs on Sun Nov 9 13:18:08 2025
    open https://gitlab.synchro.net/main/sbbs/-/issues/1004

    There doesn't seem to be anything preventing sbbsecho from importing a .msg file that will get forwarding on a different domain.

    This would allow sending a FidoNet message from the traditional -1/-1 node address to a system that is in multiple domains, and with an INTL line, have it delivered to a non-FidoNet address.

    I'm not sure if file attaches get routed as well, but if they do, this allows fairly trivial untraceable attacks on InterBBS leagues assuming routed netmail goes into the secure inbound.
    --- SBBSecho 3.31-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Deucе@1:103/705 to GitLab note in main/sbbs on Sun Nov 9 13:31:26 2025
    https://gitlab.synchro.net/main/sbbs/-/issues/1004#note_7844

    Likely just verifying that both addresses in the INTL line are in the same domain would be enough.
    --- SBBSecho 3.31-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Rob Swindell@1:103/705 to GitLab note in main/sbbs on Sun Nov 9 13:35:52 2025
    https://gitlab.synchro.net/main/sbbs/-/issues/1004#note_7846

    SBBSecho isn't 5D-aware, so don't use/check domains. It'll populate the domain in exported messages, but that's about it.
    --- SBBSecho 3.31-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Deucе@1:103/705 to GitLab note in main/sbbs on Sun Nov 9 14:30:30 2025
    https://gitlab.synchro.net/main/sbbs/-/issues/1004#note_7848

    Hrm, that does make it trickier... I can't think of any way off hand to fix the issue without either using the domain config or basically duplicating it.
    --- SBBSecho 3.31-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)