IdPOP3Server returns '+OK Login OK' without the authentication

Giganews Newsgroups
Subject: IdPOP3Server returns '+OK Login OK' without the authentication
Posted by:  Fumio Kawamata (fum…@my.email.ne.jp)
Date: Mon, 08 Jan 2007

I am making a POP3 proxy using the TIdPOP3Server.

I have some codes because I tried to make a POP3 proxy
using the TIdTCPServer.  I replaced the IdTCPServer to
the IdPOP3Server in my codes.  I am just in the beginning
phase, so I tested the POP3Server.OnConnect first.

The MUA indicated following log.

  +OK Welcome to Indy POP3 Server
  USER myaccount#actual_pop3server:110 abc (*)
  +OK Password required
  PASS ********
  +OK Login OK
  STAT
  -ERR Command Not Handled: STAT

  (*) The user information is specialized for my proxy program.

It seemed that the IdPOP3Server returns '+OK Login OK' without
the authentication because I did not handle the
IdPOP3ServerCheckUser yet.

I removed all event handler, but the MUA indicated the same log.

It is understandable that the IdPOP3Server returns
  '+OK Welcome to Indy POP3 Server' and '+OK Password required',
but it confused me that the IdPOP3Server returns '+OK Login OK'
without checking the user name and the password.

I searched about this behavior in this newsgroup but I could not
find the answer.  So, I will ask.  Is this a correct behavior
of the TIdPOP3Server?

I am using:
  -Windows XP Professional Service Pack 2 (Japanese version)
  -Delphi 6 Professional Update Pack 2 (Japanese version)
  -Indy 10 snapshot at 23:40:00 on December 2nd
  -Becky! Internet mail Version 2.24 [ja] as a MUA

Regards.

Fumio Kawamata

Replies