[Mailman-Developers] Sender: header in 2.0beta1

Gergely Madarasz gorgo@caesar.elte.hu
Thu, 23 Mar 2000 14:47:18 +0100 (MET)


On Thu, 23 Mar 2000, Nigel Metheringham wrote:

> gorgo@caesar.elte.hu said:
> > I've got it working... now smtplib can be told to use '/path/to/
> > sendmail -bs' instead of connecting to localhost:25, and talk smtp
> > there (no addresses in the shell, perhaps a bit better error
> > handling). There is still a problem though... the Sender header gets
> > rewritten this way too... but now it becomes nobody@<domain>, I
> > haven't got the faintest clue why this happens, no process should run
> > as nobody here...  
> 
> The MTA should still know the UID its invoked under - exim will have 
> the same Sender: problems as a straight CLI, and so the invoking user 
> will still need to be trusted (or your MTA's equivalent).

Yeah, so one problem remains... (but why nobody?)

> Also any loading issues from command line invocation still apply to an 
> "mta -bs" invocation - although its probable that I am simply overly 
> paranoid about this.

The Sendmail delivery module passed the recipients in the command line
thru a shell. The modified SMTPDirect module passes the recipients in SMTP
commands.

-- 
Madarasz Gergely           gorgo@caesar.elte.hu         gorgo@linux.rulez.org
      It's practically impossible to look at a penguin and feel angry.
          Egy pingvinre gyakorlatilag lehetetlen haragosan nezni.
                    HuLUG: http://mlf.linux.rulez.org/