Adam Bailey tried this:
:0 c
* ^Subject: SEND ISSUE [0-9a-z]
* !^X-Loop: odn(_at_)main-net(_dot_)com
* !^Subject:.*Re:
* !^FROM_DAEMON
# * !^Subject: SEND ISSUE .*[/.]\.
{
[stuff to send the file snipped]
}
and said:
(As a side note, despite having commented out 6th line of the
recipe, security appears to remain intact [I couldn't request files
that were in a higher directory than MAILDIR]. Although if I'm
missing something, I'd appreciate someone pointing it out.)
Adam, you're only allowing subject lines that have an alphanumeric
character immediately after "send issue", so something like
send issue ../../../some/file
really isn't accepted - but as soon as someone knows a valid directory
to start with, like volume_1 in your case, he can still use
send issue volume_1/../../../some/file
to get a file from a higher directory; the 6th line catches
occurrences of "/." and ".." in the entire subject line to prevent
that. Unless some of the files you want to send have names starting
with a dot (volume_1/.file or so), you can simply leave the line in
the recipe to close the hole.
/HW