Re: Fw: Anonymous Qmail Denial of Service

[Stefaan A Eeckels]

On 04-Jan-99 Russ Allbery wrote:
> > IIRC, qmail-queue should not be called by someone wanting to submit mail
> > (see doc/PIC*).  A better test would be to use qmail-inject:
>  
>  Doesn't qmail-inject call qmail-queue eventually anyway?  So this is just
>  a timing issue.
Maybe (I haven't looked at the code) qmail-inject collects the message
before calling qmail-queue. You'd have to kill qmail-inject after
submitting the message but before the message has been queued, which
would usually leave you a very small window of opportunity. 
But I tend to be paranoid WRT interrupting programs, and always
catch all signals and clean up after me. I just wanted to point
out that using a program not designed for interactive use
interactively is not totally kosher, IMHO.

Stefaan
-- 

PGP key available from PGP key servers (http://www.pgp.net/pgpnet/)
___________________________________________________________________
Perfection is reached, not when there is no longer anything to add,
but when there is no longer anything to take away. -- Saint-Exup�ry