[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] How can they do this and how to stop it???



> > Sep  7 17:17:08 ns sendmail[30573]: RAA30573: Authentication-Warning:
> > ns.xxxxxxxxxxxxxxxxxxx.com: colour set sender to sdjkfk@xxxxxxx using  -f
>
> somebody did run sendmail with the switch "-f" with which you can specify
> another sender address than user@xxxxxxxxxxxxxxx This can be done in the
> shell, or from a script.

As a footnote to this, the file

'/etc/mail/sendmail.ct'

dictates which users are allowed to use the '-f' switch.

Regards,

John