Viktor Dukhovni: > The Morris worm had: > > #define MAIL_FROM "mail from:</dev/null>\n" > #define MAIL_RCPT "rcpt to:<\"| sed \'1,/^$/d\' | /bin/sh ; exit 0\">\n" > > to delete the header and execute the body, you can surely do the converse. > > aliases: > logheader: "|sed -ne 'p;/^$/q'>>/some/logfile"
On my low-traffic test server I pipe mail into /usr/bin/logger so
that it gets logged (and cleaned up) along with the information
about other email activity logging.
Wietse
