On Monday 10 January 2011 23:57:22 Sam Varshavchik wrote:
> komodo writes:
> > Hi
> > 
> > I'm trying to setup courier with Deovecot LDA instead of maildrop. I need
> > to use sieve filters. And i am not able to find some usefull
> > informations about settings courier with dovecot on the internet
> > 
> > Everything is working fine if i have dot-courier file in users home
> > directory like this
> > 
> > | /usr/bin/spamc -U /var/run/spamassassin/spamd.sock -e
> > | /usr/libexec/dovecot/deliver -f $SENDER
> > 
> > Now i need to setup this globaly so i need to replace DEFAULTDELIVERY in
> > courierd, and here is the problem.
> > 
> > I need this "-f $SENDER" there, but i am not able to do this in courierd
> > config file.
> 
> Of course you can do it.
> 
> You just need to understand how the configuration file is read and used.
> And how quoting works.
> 
> You should use apostrophes to set the DEFAULTDELIVERY variable in courierd,
> so that it contains the verbatim variable reference. So that variable
> expansion occurs when the default delivery instructions take place.
> 
> And, oh, you better use double quotes to quote "$SENDER" itself. Otherwise,
> if someone were to send you an email with the sender address set to
> something like this:
> 
> MAIL FROM:<;rm -rf $HOME;@example.com>
> 
> then you'll have lots of fun on your hands, if Courier doesn't reject such
> a sender address for syntax reason -- can't think of any reason why.
> 
> Anytime you want to put together some complicated rube-goldbergian
> contraption with your mail system, you must have it audited by someone with
> experience in information security and penetration testing.
> 
> Otherwise, it's only a matter of time before you get hacked.

Hi Sam

Many thanks, now it's working as expected.
I tried double quotes for $SENDER but  didn't know that i can use apostrophes 
in DEFAULTDELIVERY. 

Best regards

Martin

------------------------------------------------------------------------------
Gaining the trust of online customers is vital for the success of any company
that requires sensitive data to be transmitted over the Web.   Learn how to 
best implement a security strategy that keeps consumers' information secure 
and instills the confidence they need to proceed with transactions.
http://p.sf.net/sfu/oracle-sfdevnl 
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to