Date: Wed, 20 Jun 2001 19:47:13 -0300 From: "Fernando P . Schapachnik" <fschapachnik@vianetworks.com.ar> To: Erick Mechler <emechler@techometer.net> Cc: faSty <fasty@i-sphere.com>, freebsd-security@FreeBSD.ORG Subject: Re: need help filter this stupid virus. Sendmail didnt stop this. Message-ID: <20010620194713.A18467@ns1.via-net-works.net.ar> In-Reply-To: <20010620153507.P73138@techometer.net>; from emechler@techometer.net on Wed, Jun 20, 2001 at 03:35:07PM -0700 References: <20010620152023.C19358@i-sphere.com> <20010620153507.P73138@techometer.net>
next in thread | previous in thread | raw e-mail | index | archive | help
En un mensaje anterior, Erick Mechler escribió: > You don't need the from. For example, try this: > > [emechler@lucifer ~]$ cat /etc/mail/access > hahaha@sexyfun.net REJECT It won't work, as the virus uses hahaha@sexyfun.net INSIDE the message itself and sendmail checks the From field from the envelope, which in this case is probably <> (empty). I was about to report it as a bug to sendmail a few days ago, but then I thought there might be some option to change that behavior or some valid reason for sendmail to accept a empty mail from:. I haven't had time to research since then. Regards. Fernando P. Schapachnik Planificación de red y tecnología VIA NET.WORKS ARGENTINA S.A. fschapachnik@vianetworks.com.ar Tel.: (54-11) 4323-3381 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010620194713.A18467>