>>>>> "Suresh" == Suresh Ramasubramanian <[EMAIL PROTECTED]> writes:

    Suresh> [EMAIL PROTECTED] (Raju Mathur) [Friday, August 09,
    Suresh> 2002 1:59 PM]:
    >> I'm using Sendmail (you know, the package called Sendmail :) I
    >> cannot disable nobody@<local host names> in the access file
    >> since that'd bust the system formmail.pl too.  Nor can I write
    >> a wrapper -- what will

    Suresh> suidperl?  Force perl scripts to run as the UID / GID of
    Suresh> the user concerned rather than as root?

Welcome back to the original question: How to permit all groups except
one to execute the sendmail binary. [1]

    >> block on?  Once the local SMTP transaction has started there is
    >> no way of distinguishing between messages sent by the
    >> legitimate formmail and the rogue ones.

    Suresh> Bulkiness detector like DCC as I said.  Seen a spammer hit
    Suresh> a formmail or other insecure cgi?  He'll pump a metric
    Suresh> shitload of mail through it.  DCC should nail this every
    Suresh> time.

Not really an option.  Can't keep the threshold too low, since
legitimate formmail usage would be affected (600 sites pointing to a
single formmail generate non-trivial amounts of traffic); can't keep
it too high otherwise the point of having the blocker is lost.

    >> Nope, procmail need an executable sendmail binary to forward
    >> messages, to bounce them, etc.  I don't think dependency is the
    >> problem here.

    Suresh> Not really.  It can use any damned MTA you like.  Qmail or
    Suresh> Postfix shouldnt have any problems at all.

Look again: *sendmail binary*.  It doesn't matter which MTA you use,
you still need the *sendmail binary* executable by everyone.

    Suresh> Just have a local delivery setup which points to procmail
    Suresh> (using procmail as the local delivery agent / LDA, or
    Suresh> using a .forward mechanism).  Procmail should use the
    Suresh> sendmail compatiblity interface just fine, like it uses
    Suresh> the actual sendmail.

Refer [1].

Regards,

-- Raju
-- 
Raju Mathur          [EMAIL PROTECTED]           http://kandalaya.org/
                     It is the mind that moves


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to