From owner-freebsd-security  Wed Jun 20 16:44: 4 2001
Delivered-To: freebsd-security@freebsd.org
Received: from i-sphere.com (shell.i-sphere.com [209.249.146.70])
	by hub.freebsd.org (Postfix) with ESMTP id 02FC337B406
	for <freebsd-security@freebsd.org>; Wed, 20 Jun 2001 16:44:01 -0700 (PDT)
	(envelope-from fasty@i-sphere.com)
Received: (from fasty@localhost)
	by i-sphere.com (8.11.3/8.11.3) id f5KNoln20844;
	Wed, 20 Jun 2001 16:50:47 -0700 (PDT)
	(envelope-from fasty)
Date: Wed, 20 Jun 2001 16:50:47 -0700
From: faSty <fasty@i-sphere.com>
To: "Fernando P . Schapachnik" <fschapachnik@vianetworks.com.ar>
Cc: freebsd-security@freebsd.org
Subject: Re: need help filter this stupid virus. Sendmail didnt stop this.
Message-ID: <20010620165047.B20771@i-sphere.com>
References: <20010620152023.C19358@i-sphere.com> <20010620153507.P73138@techometer.net> <20010620194713.A18467@ns1.via-net-works.net.ar>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010620194713.A18467@ns1.via-net-works.net.ar>; from fschapachnik@vianetworks.com.ar on Wed, Jun 20, 2001 at 07:47:13PM -0300
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

I agree, We should report to sendmail bug.

-trev

On Wed, Jun 20, 2001 at 07:47:13PM -0300, Fernando P . Schapachnik wrote:
> En un mensaje anterior, Erick Mechler escribió:
> > You don't need the from.  For example, try this:
> > 
> > [emechler@lucifer ~]$ cat /etc/mail/access
> > hahaha@sexyfun.net	REJECT
> 
> It won't work, as the virus uses hahaha@sexyfun.net INSIDE the
> message itself and sendmail checks the From field from the envelope,
> which in this case is probably <> (empty).
> 
> I was about to report it as a bug to sendmail a few days ago, but
> then I thought there might be some option to change that behavior or
> some valid reason for sendmail to accept a empty mail from:. I
> haven't had time to research since then.
> 
> Regards.
> 
> 
> Fernando P. Schapachnik
> Planificación de red y tecnología
> VIA NET.WORKS ARGENTINA S.A.
> fschapachnik@vianetworks.com.ar
> Tel.: (54-11) 4323-3381
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message