Re: Security problem with 94.4

Bill Ott <[email protected]>
Newsgroups gmane.mail.majordomo.general
Message-ID <[email protected]>
Rainer Sokoll wrote:
> On Mon, Jun 26, 2006 at 08:46:24AM -0400, Bill Ott wrote:
>
>   
>>> -------8<------
>>> begabt: "|/usr/lib/majordomo/wrapper resend -l begabt -h 
>>> rainix.jena.thur.de begabt-outgoing"
>>> begabt-digest:  begabt
>>> begabt-outgoing:        "|/usr/bin/bulk_mailer -maxdomains 1 -owner 
>>> [email protected] [email protected]
>>> /var/lib/majordomo/lists/begabt",
>>> 	"|/usr/lib/majordomo/wrapper archive2.pl -a -m -f 
>>> 	/var/lib/majordomo/archive/begabt/begabt.archive"
>>> begabt-digest-outgoing: :include:/var/lib/majordomo/lists/begabt-digest
>>> owner-begabt:   rainer
>>> owner-begabt-outgoing:  owner-begabt
>>> owner-begabt-digest:    owner-begabt
>>> owner-begabt-digest-outgoing:   owner-begabt
>>> begabt-request: "|/usr/lib/majordomo/wrapper request-answer begabt"
>>> begabt-digest-request:  "|/usr/lib/majordomo/wrapper request-answer 
>>> begabt-digest"
>>> begabt-approval:        rainer
>>> begabt-digest-approval: begabt-approval
>>> -------8<------
>>>
>>> But my MX does not accept mails for begabt-outgoing or
>>> begabt-digest-outgoing ;-)
>>>
>>> Rainer
>>>
>>>  
>>>       
>> How did you get you MX not to forward begabt-outgoing?
>>     
>
> I have a list of valid addresses on my MX. begabt-outgoing is needed by
> majordomo only, so it is not listed in the valid addresses. No forward
> needed.
>
> Rainer
>
>   
My understanding was that the :include: was passed to sendmail for 
processing.  That is where my exposure is. I just sent a note to 
begabt-digest-outgoing. Hopefully it did not go through. If it did, your 
exposure is just in a different place.

-- 
Regards,
Bill Ott

Email: Mailto://[email protected]
Website: http://www.theotts.org
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.