Hello!

My web server was hacked a few days ago and I decided to install some new program and modules which improve security.
I find in sarge libapache-mod-chroot which chroot apache (and it work fine) but I can't send mail from php.
I installed ssmtp in chroot (I think so) in chroot environment but it doesn't help :(


Does anyone use this module? Perhaps I do something wrong with it ssmtp...

I found a mini_sendmail. It is small program compiled without shared library...
When I configure php in VirutalHost in this way:


php_admin_value sendmail_path "/usr/sbin/mini_sendmail -t [EMAIL PROTECTED]"

My PHP send emails but mail() function don't return any value (true on false) and php scripts report an error.
I reconfigured my PHPBB2 forums to use extended mail system (127.0.0.1) and it's work exelent...


My question is: Is any security problem with mini_sendmail and why I can't find it in distribution?

--
Krzysztof Jozwiak
Debian administrator






--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Reply via email to