"Leonardo Fermoselle" <lfermose(_at_)hotmail(_dot_)com> writes:
If I use this .forward file:
"|IFS=' ' && /usr/bin/procmail -f- || exit 75 #leonardo"
I get the following error when I send a mail to
leonardo(_at_)cpba(_dot_)com(_dot_)ar :
**************************************************************************
The original message was received at Wed, 25 Jul 2001 10:08:51 -0300 from
Antares.Netverk.Com.Ar [200.16.204.10]
----- The following addresses had permanent fatal errors -----
"|IFS=' ' && /usr/bin/procmail -f- || exit 75 #leonardo"
(reason: service unavailable)
(expanded from: <leonardo(_at_)cpba(_dot_)com(_dot_)ar>)
----- Transcript of session follows -----
smrsh: IFS=' not available for sendmail programs
554 5.0.0 "|IFS=' ' && /usr/bin/procmail -f- || exit 75 #leonardo"... Service
unavailable
**************************************************************************
And, if I use "|exec /usr/bin/procmail" it works.
Then use that.
Wath is IFS?, Where can I find information about sintax in .formard
file.
IFS is the "interfield separator" used by /bin/sh to decide how to break
up a line into the separate 'words' that make up a command. There was a
set of security exploits involving .forward files that could be blocked
if you reset IFS in your .forward file, as seen above.
Eventually, the better solution of fixing the program that processed
the .forward files was implemented. There's a program called "smrsh"
(SendMail Restricted Shell) that takes care of the IFS bit and
simultaneouly restricts the list of programs that can be invoked from
.forward files.
Since your system using smrsh, you can drop the IFS bit and just use:
"|exec /usr/bin/procmail"
Philip Guenther
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail