similar to: CERT Advisory CA-96.20 - Sendmail Vulnerabilities

I''m looking for some evidence, backup up with dates and references, that shows that the Linux community responds to security problems more quickly than other OS vendors, and thus might be considered "more secure". A number of fairly high profile corporations are starting to look for such information as they consider Linux as an alternative solution to other UNIXes. Something

Hello. I am trying to forward the e-mails received to one address towards a php script. I am trying all I can but nothing does. I have edited my /etc/aliases file and added this line. ecard-bounce: "|/usr/bin/php /etc/smrsh/ecardbounce.php" Then, of course I do a 'newaliases'. In my /etc/smrsh I have placed the symbolic link defined above, which has been created this way: ln

Everyone, I am working on a Centos 5.9 system. I have an need to be able to activate a piece of software from /etc/smrsh that is activated when sendmail delivers the e-mail to this piece of software. I would like this piece of software to take on the user and group identities that are different than 'mail' which is what happens now. I want to use a user and group that is not root), so

Support Requests item #1813, was opened at 2005-04-20 23:48 You can respond by visiting: http://rubyforge.org/tracker/?func=detail&atid=412&aid=1813&group_id=85 Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Tom Copeland (tom) Assigned to: Nobody (None) Summary: Merely a test Initial Comment: Hm, did this go to to win32utils-devel? Tom

HI folks, I've an up-to-date CentOS 5.x box on a small intranet (<20 users). We did a reboot over the weekend and all appears well except that clients on the LAN can no longer send email. Just hangs/times out. No clear identifiers in the /var/log/maillog or /var/log/messages. We're not setup for ESMTP as it's a closed network and I'm really hoping for a kickstart as to

Hello, I'm trying to configure sieve plugin on my mail server so that people can do mail filtering (and mostly vacation notification) on their account. The mail server is running fine since 5 years and is based on :- sendmail- dovecot- roundcube It serves 2 differents domains. I've recently installed pigeonhole for fc17, and managed to configure managesieve plugin in roundcube

Sorry, couldn't find this in the archives. Under freebsd 4.x, the native mail.local that sendmail uses by default writes From_ lines that include the origin address. This is very readily parsable and handy for quick greps in mboxes. But deliver defaults it to MAILER-DAEMON. I see you can specify the envelope From_ with "-f", but I'm not sure how that's useful. Also

Hi all, I've been trying to hit on the right configuration combo to allow relaying from specific users and/or domains to an internal box running Sendmail. Reading the docs at http://www.sendmail.org/m4/anti_spam.html#relay and http://www.sendmail.org/m4/anti_spam.html#access_db_fine I would appear that I should be able to all per-address relaying in /etc/mail/access by enabling

Need help with setup/config. Current situation: (dovecot version : 1.1.7) we have system users and virtual users. (with different domains) Virtual users have procmail as LDA Now we want "deliver" to become the LDA I'm confused reading http://wiki.dovecot.org/LDA/Sendmail sendmail.mc: divert(-1) divert(0)dnl include(`/usr/share/sendmail-cf/m4/cf.m4')dnl

>Date: Tue, 11 Aug 1998 13:21:06 -0400 >From: CERT Advisory <cert-advisory@cert.org> >To: cert-advisory@coal.cert.org >Subject: CERT Advisory CA-98.10 - mime_buffer_overflows >Reply-To: cert-advisory-request@cert.org >Organization: CERT(sm) Coordination Center - +1 412-268-7090 > >-----BEGIN PGP SIGNED MESSAGE----- >

Hi all. I've got a bit of a peculiar issue here. I'm running dovecot 1.2.9 on an Ubuntu 9.10 box using Sendmail 8.14.3. I've set up Sendmail similar to <http://wiki.dovecot.org/LDA/Sendmail> except that *) dovecot's deliver is configured as my default local mailer, so some of the flags for the Mailer definition had to be adjusted accordingly. *) The setuid users

Included below are my config files: sendmail.mc, dovecot.m4, dovecot.conf, dovecot-sql.conf. Whenever I try to send email into this system, it rejects it with user does not exist, however, the user does exist as far as dovecot (imap) is concerned, it is in the database. THANKS - Yossie # for i in /etc/dovecot/dovecot.conf /etc/dovecot/dovecot-sql.conf /

Apologies for resending this, I am not sure it made it through the first time.. --- Included below are my config files: sendmail.mc, dovecot.m4, dovecot.conf, dovecot-sql.conf. Whenever I try to send email into this system, it rejects it with user does not exist, however, the user does exist as far as dovecot (imap) is concerned, it is in the database. THANKS - Yossie # for i in

Hm, look what I got hold of today.. Works if sendmail is mode 4111 or similar: #! /bin/sh # # # Hi ! # This is exploit for sendmail smtpd bug # (ver. 8.7-8.8.2 for FreeBSD, Linux and may be other platforms). # This shell script does a root shell in /tmp directory. # If you have any problems with it, drop me a letter. #

Greetings, I'm refining a CentOs configuration installation, now just over one month old running on a colocated production server. Previously, we ran a version of Fedora for over seven years. Specifically, I'm reviewing our sendmail configuration, both with respect to authentication and port usage. Previously, we had the following line in the sendmail.mc line:

I have centos 4.8 i686. It has stock sendmail. see file below. I am getting reports that it is an open relay. I have searched all around and it seems like it should be closed. I have dnl for accept_unresolvable_domains. What can I do to close my sendmail. Thanks, Jerry My sendmail.mc is as follows: --------------------------------- divert(-1)dnl dnl # dnl # This is the sendmail macro config

All; I installed sendmail via yum, but if I test it like this: echo "Subject: sendmail test" | sendmail sbob at quadratum-braccas.com I get a local mail on the server with this every time: Message? 1: From MAILER-DAEMON at kdb-bugs.example.com? Sun Apr 19 10:15:00 2020 Return-Path: <MAILER-DAEMON at kdb-bugs.example.com> Date: Sun, 19 Apr 2020 10:15:00 -0600 From: Mail

I'm trying to get Dovecot working with Virtual Users and Sendmail on OpenIndiana 151a7. OpenIndiana is the Open Source continuation of OpenSolaris after Oracle tried to kill it off a couple of years ago shortly after acquiring Sun Microsystems. I'm not sure if this is so much a Dovecot problem, as much of a Sendmail problem. I thought this would probably be a better list to start with,

Hi, I've been trying for the past few days to come up with a method for checking a FreeBSD system to see if it is vulnerable to an issue described by a FreeBSD security advisory in some automated way, similar to the way portaudit can use VuXML to check for vulnerabilities in ports. Right now, I'm a bit stuck--there seem to be fairly major issues with all the methods I've come up

Hello everyone, I tried to configure sendmail so that I can use mail() in php. I don't host my email server, my ISP does. I just want to configure sendmail so that it uses external email server (my ISP) to send mail. When I executed mail(), i got no error report from php. I checked /var/log/maillog and it indicated that the message was accepted for delivery. However, it didn't