On Donnerstag, 24. Mai 2007, you wrote:
To warm-up an
old discussion about this feature:
i think this should be really disabled by default, because of user
confusion and possible security issues.
I agree it confuses a bit (maybe because of the lack of docs), but other
other hand it is useful as it spears a lot of resources without any deep
knowledge from the user. Anyhow, what security issues do you see here?
Haven't look deeper into the code, but if somebody spoof some 503 packets to
the server (easy with UDP), then he could easily disable all outbound
destinations.
Henning