Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 04 Dec 1998 19:05:46 -0600
From:      David Kelly <dkelly@hiwaay.net>
To:        mgrommet@insolwwb.net
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Advice on sendmail / execution of programs through .forward 
Message-ID:  <199812050105.TAA19091@n4hhe.ampr.org>
In-Reply-To: Message from mike grommet <mgrommet@insolwwb.net>  of "Fri, 04 Dec 1998 14:06:35 CST." <A199D70FC96DD211AD1000609767926103598F@ISIMAIL> 

next in thread | previous in thread | raw e-mail | index | archive | help
mike grommet writes:
> Hi guys, I need some advice...
> 
> I block off shell access to my primary server...
> however one of my users pulled a sneaky one.
> 
> He executed a xterm shell from his .forward and had it connect to his X
> server on his personal PC... pretty slick actually, I have to give him that.
> I never even considered it.
[...]
> Now, its quite convenient to be able to run programs from .forward, procmail
> comes to mind immediately...
> 
> So what do you guys suggest to fix this problem the right way?

You could delete (comment out) this line from /etc/sendmail.cf and
disable forwarding completely:

# Forward file search path
O ForwardPath=$z/.forward.$w+$h:$z/.forward+$h:$z/.forward.$w:$z/.forward


--
David Kelly N4HHE, dkelly@nospam.hiwaay.net
=====================================================================
The human mind ordinarily operates at only ten percent of its
capacity -- the rest is overhead for the operating system.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199812050105.TAA19091>