Great Circle Associates Firewalls
(March 1998)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Hiding reply addresses
From: John Lines <John . Lines @ aeat . co . uk>
Date: Mon, 09 Mar 1998 17:36:42 +0000
To: Randy Grimshaw <rgrimsha @ mailbox . syr . edu>
Cc: Chris Brenton <cbrenton @ sover . net>, firewalls @ greatcircle . com
In-reply-to: Your message of "Mon, 09 Mar 1998 10:03:04 EST." <Pine . SOL . 3 . 95 . 980309095738 . 6331A-100000 @ gamera . syr . edu>

Randy Grimshaw writes :
> 
> You can add the following rule to the *check_mail* hook in sendmail
>      tab
> R$*<>   $#error $@ 5.7.1 $: "551 You must provide a proper from address"
>   

Please be very careful when doing this type of thing. A blank envelope sender
is used to identify an undeliverable mail notification. See rfc821

      This notification message must be from the server-SMTP at this
      host.  Of course, server-SMTPs should not send notification
      messages about problems with notification messages.  One way to
      prevent loops in error reporting is to specify a null reverse-path
      in the MAIL command of a notification message.  When such a
      message is relayed it is permissible to leave the reverse-path
      null.  A MAIL command with a null reverse-path appears as follows:
 
         MAIL FROM:<>
 

Breaking messages from Mailer Daemons may cause you problems more serious
than spam.


	John Lines



> 
> This will require the sender to provide something as a mail from: value
> and then any content given will be checked by the regular tests that you
> provide. See sendmail.org for additional info about the hook.
> 
> <><Randall Grimshaw, Network Programmer, Syracuse University, 315-443-5779
> 
> On Fri, 6 Mar 1998, Chris Brenton wrote:
> 
> > The blank return path bothered me. I've tested this off of a few mail systems
> > and was surprised to see that all of them would accept a blank "mail from:"
> > line. Are there any firewalls out there that would kick this message out by
> > default? Mail systems?
> 




Follow-Ups:
References:
Indexed By Date Previous: Re: Denial of Service [Was Re: Harsh Security audits?]
From: Ted Doty <ted @ iss . net>
Next: RE: Pentagon Hackers Caught!
From: "Moser, Stefan" <stefan . moser @ csfb . com>
Indexed By Thread Previous: Re: Hiding reply addresses
From: Randy Grimshaw <rgrimsha @ mailbox . syr . edu>
Next: Re: Hiding reply addresses
From: Randy Grimshaw <rgrimsha @ mailbox . syr . edu>

Google
 
Search Internet Search www.greatcircle.com