On Fri, 2 Aug 1996, (Paul Blackburn) wrote:

> Lubos Kejzlar <[EMAIL PROTECTED]> writes:
> 
> >In planed configuration is unacceptable to run procmail (or any other
> >'uncontrolled' program via pipes in user's .forward because of sharing
> >PAG/tokens with sendmail :-( However we would like (or must) continue to
> >support any kind of messages filtering.
> 
> Hi Lubos,
> 
> I had a similar issue with auth-sendmail [1].
> The solution is to use a pagsh in the sendmail.cf [2] file (not shell).
> This means a new PAG will be obtained to execute the prog and the
> token of the re-authenticating sendmail daemon is not compromised.
> 
> Hope this helps!
> --
> paul                             http://acm.org/~mpb/homepage.html
> 

Hi, a couple of questions.

Under which auth token does the filter run under?  What is to prevent a 
user from forwarding the mail to |xterm -d whatever:0.0.

Do you have seperate mail hosts for mail or do you just send mail to one 
of the afs fileservers?

Anyone else also using afs authenticated sendmail to deliver mail into 
$HOME/.mail (or close model to that) solutions, please post your 
experiences, pitfalls etc.  We also must support forwarding through 
procmail for mail delivery into a users home directory.


thanks


Vijay Gill                         |The (paying) customer is always right.
[EMAIL PROTECTED], [EMAIL PROTECTED]  |                  - Piercarlo Grandi
http://umbc.edu/~vijay             | Eagles may soar, but weasels don't get
These are my opinions only.        | sucked into jet engines.

Reply via email to