From owner-freebsd-security Thu Jun 21 5: 4:16 2001 Delivered-To: freebsd-security@freebsd.org Received: from ns.shawneelink.net (ns.shawneelink.net [216.240.66.11]) by hub.freebsd.org (Postfix) with ESMTP id 56EB537B406 for ; Thu, 21 Jun 2001 05:04:13 -0700 (PDT) (envelope-from jb@jbacher.com) Received: from ns.shawneelink.net (ns.shawneelink.net [216.240.66.11]) by ns.shawneelink.net (8.10.1/8.10.1) with ESMTP id f5LC3gV24393; Thu, 21 Jun 2001 07:03:42 -0500 (CDT) Date: Thu, 21 Jun 2001 07:03:42 -0500 (CDT) From: J Bacher X-Sender: jb@ns.shawneelink.net To: faSty Cc: "Fernando P . Schapachnik" , freebsd-security@FreeBSD.ORG Subject: Re: need help filter this stupid virus. Sendmail didnt stop this. In-Reply-To: <20010620165047.B20771@i-sphere.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=X-UNKNOWN Content-Transfer-Encoding: QUOTED-PRINTABLE Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > I agree, We should report to sendmail bug. >=20 > -trev You might first want to read the RFC regarding mail bounces. It is not a bug. > On Wed, Jun 20, 2001 at 07:47:13PM -0300, Fernando P . Schapachnik wrote: > > En un mensaje anterior, Erick Mechler escribi=F3: > > > You don't need the from. For example, try this: > > >=20 > > > [emechler@lucifer ~]$ cat /etc/mail/access > > > hahaha@sexyfun.net=09REJECT > >=20 > > It won't work, as the virus uses hahaha@sexyfun.net INSIDE the > > message itself and sendmail checks the From field from the envelope, > > which in this case is probably <> (empty). > >=20 > > I was about to report it as a bug to sendmail a few days ago, but > > then I thought there might be some option to change that behavior or > > some valid reason for sendmail to accept a empty mail from:. I > > haven't had time to research since then. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message