Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 11 Mar 1999 11:48:11 -0800 (PST)
From:      Gregory Neil Shapiro <sendmail+gshapiro@sendmail.org>
To:        John Beck <sendmail+jbeck@sendmail.org>
Cc:        Gregory Neil Shapiro <sendmail+gshapiro@sendmail.org>, admin@wholesalehosting.com, freebsd-isp@FreeBSD.ORG, sendmail-questions@sendmail.org
Subject:   Re: I must be stupid 
Message-ID:  <14056.7675.167207.780586@scooter.sendmail.com>
In-Reply-To: <199903111939.LAA21852@opal.eng.sun.com>
References:  <36E7A1E938E.955CADMIN@domains.md> <199903111332.FAA20021@opal.eng.sun.com> <14056.5768.21905.815820@scooter.sendmail.com> <199903111939.LAA21852@opal.eng.sun.com>

next in thread | previous in thread | raw e-mail | index | archive | help
John> Well, in our case, we know everyone involved, and there is mutual
John> trust, so no worries.  But in general it's still easy to solve:
John> simply:

John> % grep -iv foo.tld foo.txt

John> where foo.tld is the domain and foo.txt is the virtual user sub-table
John> for that domain.  Then cat the output of the grep for each domain
John> into the master virtual user table before doing the makemap.

Nope again :)

Assuming I wanted to steal all mail to otherperson.com and I control
mydomain.com:

@otherperson.com	gshapiro+mydomain.com@mydomain.com

Your grep would allow that through.  It really needs a script which only
allows non-qualified user names on the left hand side (and a default entry) 
and tacks on the domain that the user controls.  Better to be paranoid.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?14056.7675.167207.780586>