Final word on sendmail dropping mail.
Dave Cohrs
dave at uwvax.UUCP
Thu Dec 6 13:18:31 AEST 1984
> --------------------------------------------------------------------
> Repeat By:
> Crank up the load over 12 or so. Send local mail. Run sendmail -q
> to force delivery of queued mail. Wait for delivery....
>
> ----------------------------------------------------------------
will a load of 50 do (recorded today)?
> Re: taking out the 'user' checks.
This isn't the best thing to do. The problem here really is that
/bin/mail (as all good [grrrr] BSD programs) does a getlogin() instead
of a getpwuid(getuid()). If this is done, the code functions fine
as is. If these checks are taken out, *ANY USER* can send mail
and say it's from WHOMEVER THEY WANT to say it's from (Note: sites
that have implemented this 'fix' now have very insecure mail systems).
/bin/mail has enough holes in it, it doesn't need more!
--
(Bug? What bug? That's a feature!)
Dave Cohrs
...!{allegra,heurikon,ihnp4,seismo,uwm-evax}!uwvax!dave
dave at wisc-rsch.arpa
More information about the Comp.unix.wizards
mailing list