Re: env_from for virus message

john crawford wrote:
> Hi all. Hi Jason.
>
> There's probably a good reason for it, but I was wondering why Jason's
> code doesn't insert
> the virus from address into the qmail-inject call in
> qmail-scanner-queue.pl
> which generates the quarantine report. I noticed the envelope-from
> wasn't set.
>
>  open(SM,"|$qmailinject -h -f ''")||&error_condition("cannot open
> $qmailinject for sending quarantine report - $!");
> (actual)
>
> vs.
>
>  open(SM,"|$qmailinject -h -f $V_FROM")||&error_condition("cannot open
> $qmailinject for sending quarantine report - $!");

Because the former means it has a NULL email address - which means MTAs
won't generate bounces back to it.

Basically all alerts generated by Qmail-Scanner have an empty/NULL
Return-Path so that they appear and are treated like bounce mail
messages. i.e. no reply is every automatically generated to them.

i.e. it's a feature - not a bug

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642