Email Exploits using "Nobody" fix?
 

We've been getting exploited by folks sending spam as us (and some pretty serious ones too..like that Paypal thing pfbbt) using "Return-Path: <nobody@valinor.warofthering.net>", which we can prevent at the server level by not allowing mail to be sent from "Nobody"

The problem is that VB uses this for all off it's notifications, and when blocked, the notifies to not go out period.

My question is....and I really hope that this can be done....is can the VB code be modified so that the return path uses a valid email address to it's system..like Illuvatar@warofthering.net which is the webmaster email in the admin panel.

I really don't like getting threatned with legal action because of this, and I also don't want to stop my users from taking full advantage of the boards, so if anybody else has run into this and could help me out, it would sure help me out!

Thanks!

PS....this is the same post that I made over at vb.com and they said that VB can be hacked "slightly" to use SMTP for the mail, but that they of course cannot support it.

So....I'm posting it here...hehe......

Can anyone help a fella out? :ermm:

https://vborg.vbsupport.ru/showthread.php?t=67294

:)

Thanks Zach! :)