OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Wietse Venema (wietseporcupine.org)
Date: Wed Aug 01 2001 - 07:53:22 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Michael Tokarev:
    > Just discovered a flaw in FILTER_README:
    >
    > ---
    > ...
    > 3 - Define a content filtering entry in the Postfix master file:
    >
    > /etc/postfix/master.cf:
    > filter unix - n n - - pipe
    > flags=Rq user=filter argv=/somewhere/filter -f ${sender} -- ${recipient}
    >
    > The /some/where/filter program can be a simple shell script like this:
    >
    > ...
    > SENDMAIL=/usr/sbin/sendmail
    > ...
    > $SENDMAIL "$" <in.$$
    >
    > First, this variant will screw mails that contains lines with only
    > one dot (sendmail will stop eating input on first such a line).
    > At least one flags for sendmail is needed, `-i'.

    Aha, this is a case of bit rot. The '.' support in the sendmail
    command was added *after* FILTER_README was written.

    > Second, why "flags=R" of pipe(8) daemon? Why add Return-Path here?

    Does it hurt?

    > + flags=q user=filter argv=/somewhere/filter ${sender} ${recipient}
    ...
    > + SENDER="$1"
    > + shift
    > +
    > - $SENDMAIL "$" <in.$$
    ....
    > + $SENDMAIL -i -f "$SENDER" -- "$" <in.$$

    There is no need to change the argument vector, and therefore it
    MUST NOT be changed.

            Wietse
    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users