procmail
[Top] [All Lists]

Re: E-Mailing the Header from within procmailrc

2004-02-05 18:29:01
On Thu, 2004-02-05 at 19:41, Greg Ennis wrote:
Everyone,

<snip>
I would like to be able to identify certain header information in the case
of spam and virus identifications and forward a packet to the designated
recipient without the spam and without the virus.  I would like to add a
line or two to the body letting the recipient know what happened to the
packet.
snip>

 Although I'm sure some creative soul will be more than happy to answer
your question, why would you want to do this?   I've seen several
paragraphs on this in Hacking Linux Exposed and other security letters
that strongly caution against doing this.  Writing from memory, one
issue is that they never really know for sure you exist **until you
respond**, then they know for sure.   Another issue, probably more
common, is that the true server id that was responsible at the point of
origin will never be known, at least not to a "Reply" from a header, as
most of these are spoofed, as I understand it.   The other opinion was
that you risk raising a flag, so to speak, of challenge or intrique to
try and beat your system controls.
  It's no big deal to me, just a thought...

Robert

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>