Final word on sendmail dropping mail.

Dave Cohrs dave at uwvax.UUCP
Thu Dec 6 13:18:31 AEST 1984


> --------------------------------------------------------------------
> Repeat By:
> Crank up the load over 12 or so.  Send local mail.  Run sendmail -q
> to force delivery of queued mail.  Wait for delivery....
> 
> ----------------------------------------------------------------

	will a load of 50 do (recorded today)?

> Re: taking out the 'user' checks.

This isn't the best thing to do.  The problem here really is that
/bin/mail (as all good [grrrr] BSD programs) does a getlogin() instead
of a getpwuid(getuid()).  If this is done, the code functions fine
as is.  If these checks are taken out, *ANY USER* can send mail
and say it's from WHOMEVER THEY WANT to say it's from (Note: sites
that have implemented this 'fix' now have very insecure mail systems).
/bin/mail has enough holes in it, it doesn't need more!

-- 
(Bug?  What bug?  That's a feature!)

Dave Cohrs
...!{allegra,heurikon,ihnp4,seismo,uwm-evax}!uwvax!dave
dave at wisc-rsch.arpa



More information about the Comp.unix.wizards mailing list