[Esa-l] Update on POISONED Failure

[Einhorn, Drew]

John sent me a copy of this several weeks ago in
response to an email I sent him.

I struggled with it for a while.  The first puzzle
was where in ruleset 0 to make the insertion.  

Since I am not a sendmail adept, I decided to trust the
m4 processor that is distributed with sendmail and let
it put the additional rules where it thought local 
additions to ruleset 0 should go.

Wrong!!!

It put the additional rules at the end of ruleset 0.
Actually it put them in ruleset 98, which is called
after ruleset 0.  

After studying the O'Reilly and Associates book and
figuring out some of the mysteries involved in
debugging sendmail.cf problems, I came to the conclusion
that these rules belonged at the beginning of ruleset 0.

Made some other adjustments I'm less certain about.
Did some testing all seemed to be well.

Went on vacation.  While I was gone a major crisis arose.  
The procmail filter was removed, and a lot of money was
spent on 3rd party software running on the Exchange
Server.  

Haven't studied the situation enough to come to any conclusions
about what really went wrong while I was away.

-----Original Message-----
From: John D. Hardin [mailto:jhardin at wolfenet.com]
Sent: Wednesday, July 26, 2000 7:42 AM
To: Email Security Announce list
Subject: Re: [Esa-l] Update on POISONED Failure


On Wed, 26 Jul 2000, Jason D. Jordan wrote:

> Does anyone know of a way to force procmail to be executed
> regardless if the user exists or not?  Or to put it another way -
> to force forwarded/relayed email through procmail too.

The attachment contains some rudimentary documentation. Refinements
are welcomed.

--
 John Hardin KA7OHZ   ICQ#15735746   http://www.wolfenet.com/~jhardin/
 jhardin at wolfenet.com      pgpk -a finger://gonzo.wolfenet.com/jhardin
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
  does quite what I want. I wish Christopher Robin was here."
				-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
   95 days until Daylight Savings Time ends