On 20 Dec 1998, Joe Moss wrote:
> I am sending email to a mailing list of people using a cgi program,
> and the email always lists the sender's address with the addition of
> "On Behalf of "LOCAL ADDRESS". Is there a way to remove the "On
> behalf of..." part so the recipients only see the address of the
> actual sender?
Surely that should be "fixed" in the cgi if it is to be trusted. The
cgi should call exim or sendmail with -f username, and the process owner
of the cgi should be made one of the trusted_users.
Of course, this gives that that process owner the right to send mail
from any user. So if there is not careful control over what cgi's can do,
you are opening up a hole.
-j
--
Jeffrey Goldberg +44 (0)1234 750 111 x 2826
Cranfield Computer Centre FAX 751 814
J.Goldberg@??? http://WWW.Cranfield.ac.uk/public/cc/cc047/
Relativism is the triumph of authority over truth, convention over justice.
--
*** Exim information can be found at
http://www.exim.org/ ***
