On Thu, Aug 22, 2024 at 03:03:48PM +0200, Illya Meyer wrote:
> Hi there,
> 
> affects: Manual page "forward" in OpenBSD 7.5.
> affects also: Error message from sendmail.
> 
> Please correct the EXAMPLES section in "man 5 forward":
> 
> ---- Schnipp 8< ----
> EXAMPLES
>       The following file forwards mail to "u...@example.com", and pipes the
>       same mail to "examplemda".
> 
>             # empty lines are ignored
> 
>             u...@example.com        # anything after # is ignored
>             "|/path/to/examplemda"
> ---- Schnapp 8< ----
> 
> because piping is no longer allowed (at least, I think so :-))
> 
> from Changelog 7.4 -> 7.5: https://www.openbsd.org/plus75.html:
> 
> ---- Schnipp 8< ----
> Disallowed custom commands and file reading in a .forward file, allowing 
> only forwarding addresses and users, so that smtpd(8) can't execute 
> custom commands set by root in a .forward.
> ---- Schnapp 8< ----
> 
> It would be very nice to have a better error message in sendmail.
> 
> "sendmail: command failed: 451 Temporary failure"
> 
> is of cource correct, but not very clear, if a pipe is in a .forward-file.
> 
> Thank you and have a nice day
> Illya Meyer
> 

hi.

i've added a note to forward(5) detailing that "|" and ":include:" are
disallowed for root.

jmc

Reply via email to