Alex Edo
Insert Brain Here...
Join date: 27 Feb 2005
Posts: 108
|
09-09-2005 08:37
Add an option/ command to only accept mails from a certain Key. not even Queue it. this will stop Attacks PLS PLS PLS
|
Cid Jacobs
Theoretical Meteorologist
Join date: 18 Jul 2004
Posts: 4,304
|
09-09-2005 08:53
From: Alex Edo Add an option/ command to only accept mails from a certain Key. not even Queue it. this will stop Attacks PLS PLS PLS Well you can already set it up so that it only gets emails from a certain address, and i do agree that the que should discount them, but that would open up the entire mail system in SL to attack instead of just your object. All of those emails would need to be checked to see if they match your function requirments either way. By moving it into your script instead of server side, it saves everyone from a global attack. Just try to hide your prim and name it object, that might help some?
|
Minsk Oud
Registered User
Join date: 12 Jul 2005
Posts: 85
|
09-09-2005 09:05
A fairly safe way to do this already is with the subject-line matching on the llGetNextEmail. If you assume a shared secret between the objects that want to communicate, the listener can just call:
llGetNextEmail("", llMd5String(secret + llGetObjectKey(), 0));
The MD5 of the secret and recipient key are to prevent disclosure of the secret if a message gets sent to the wrong place. I am using a fairly close variation to do signed e-mail communications, though may wind up using this to prevent floods.
_____________________
Ignorance is fleeting, but stupidity is forever. Ego, similar.
|
nonnux white
NN Dez!gns
Join date: 8 Oct 2004
Posts: 90
|
09-09-2005 09:28
it is impossible to avoid a DoS attack. u can filter every mail, but a DoS Attack will only fill up the queue with bad emails. there is no way to secure an object that needs to receive emails from reandom objects (with random Keys). the solution is XML-RPC. so this request void if XML-RPC was created. i still don't understand why llSendRemoteData is not implemented for object-to-object only.
|