In the last mail, Brian Behlendorf wrote:
>
> On Tue, 14 Mar 1995, Eric Klien wrote:
> > I am working on changing the code of majordomo by hand to solve some
> > major security problems with it. The problems that I have are that
> > 1) anyone can post to the list by sending e-mail to list-l-outgoing
> > and 2) anyone can get a copy of the list by sending majordomo telnet
> > client 25, expn listname-outgoing even if I disable the who command
> > in majordomo.
> >
> > Can anyone give suggestions on solving the above problems?
>
> Yes, rename the outgoing alias to something other than list-outgoing.
>
surely it's better to write the SMTP envelope with an address which
if mailed either goes to /dev/null or better to a person/robot. That's
how we run listproc (not how it was written though). This just
seems like a general point.
--
Alan Thew
alan.thew@liv.ac.uk ...!uknet!liv!alan.thew Tel: +44 151 794-4497
University of Liverpool, Computing Services Fax: +44 151 794-4442
References:
|
|
