OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
FreeBSD Security Archives: Procmail + Sendmail

Procmail + Sendmail


Christoph Sold (cscheasy.de)
Mon, 25 Oct 1999 13:02:05 +0200 (CEST)


Paulo Fragoso writes:
> Hi,
>
> We've got one server without shell access, only POP3, FTP and HTTP
> protocol are permited. We're upgrading this machine to FreeBSD 3.3-RELEASE
> and we're thinking use procmail instead mail.local.

Good.

> Are there any possible to use .procmailrc like .forward to exec any
> programa (like gcc) in this machine? To block .forward we're using SMRSH
> on sendmail, works fine.

It is possible to pipe mail into any command. You may have to have
some thought about blocking this feature, since it cannot be disabled
as easily as sendmail can utilize smrsh. Building a small jail should
suffice, though.

> Is procmail securit?

Depends how you install it.

> Thanks,
> Paulo Fragoso.

You're welcome.
-Christoph Sold

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



This archive was generated by hypermail 2.0b3 on Mon Oct 25 1999 - 06:02:34 CDT