[EMAIL PROTECTED] (Raju Mathur) [Friday, August 09, 2002 8:21 PM]:

> Welcome back to the original question: How to permit all groups except
> one to execute the sendmail binary. [1]

Why, by the way?  If remote execution by unauthorized users is what you are
concerned with, the best way to go is -

* Upgrade to the latest formmail from http://nms-cgi.sourceforge.net (fixes
the horrendous bugs in Matt Wright's code)

or

* Move to something far better, like cgiemail
(http://web.mit.edu/wwwdev/cgiemail/)

> Not really an option.  Can't keep the threshold too low, since
> legitimate formmail usage would be affected (600 sites pointing to a

Rate limiting - no.  Bulk detection = Yes.

> Look again: *sendmail binary*.  It doesn't matter which MTA you use,
> you still need the *sendmail binary* executable by everyone.

Oh yup - but at least some versions of formmail allow you to specify a
socket to port 25 ...

    -srs



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to