3 line fix for forged mail

Chuck L. Peterson clp at altos86.UUCP
Wed May 24 15:59:15 AEST 1989


It seems to me that sendmail should disallow connections from
ports which were not originated from priviledged ports using
code similar to that in rlogind:

	if (fromp->sin_family != AF_INET ||
	    fromp->sin_port >= IPPORT_RESERVED)
		fatal(f, "Permission denied");

/usr/lib/sendmail should also be changed to obtain the "from" machine 
name using the internet number in sin_addr.
Only Wizards should be asked for a machine name.
If this has already been fixed; never mind (in gilda font).

Chuck L. Peterson
clp at altos.com



More information about the Comp.unix.wizards mailing list