[Esd-l] SECURITY_NOTIFY_SENDER= question

John D. Hardin jhardin at impsec.org
Thu Jan 29 14:33:31 PST 2004


On Thu, 29 Jan 2004, Randy Reames wrote:

> > if this is the case is there a way to just send the warning and /dev/null
> > the actual message?
> 
> I just disable this. Rarely is the From: in the email the real
> sender anyway. With all of these being spoofed all the
> NOTIFY_SENDER does is cause more traffic.

...which leaves the occasional real person who sends an attachment
wondering where it went.

Oh, well. Tradeoffs.

I'm going to try to make the smart reply to a bit smarter based on
what NovArg is doing with Received: headers.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
  does quite what I want. I wish Christopher Robin was here."
				-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
   65 days until the Slovakian Presidential Election



More information about the esd-l mailing list