Re: [exim] Exim 4.94 - Virtual domains

Páxina inicial
Borrar esta mensaxe
Responder a esta mensaxe
Autor: Patrick Boutilier
Data:  
Para: exim-users
Asunto: Re: [exim] Exim 4.94 - Virtual domains
On 6/2/20 3:18 PM, Jeremy Harris via Exim-users wrote:
> On 02/06/2020 19:06, Patrick Boutilier via Exim-users wrote:
>> This router no longer works:
>>
>> virtual:
>>   driver = redirect
>>   domains = dsearch;/etc/mail/virtual
>>   data = ${lookup{$local_part}lsearch{/etc/mail/virtual/$domain}}
>>   no_more
>>
>>
>> Testing with -bh I get "Tainted filename for search" :
>
> Yes: the content of $domain is provided by a potential attacker.
> Validate it before using it.
>



data = ${lookup{$local_part}lsearch{/etc/mail/virtual/$domain_data}}


works.
begin:vcard
fn:Patrick Boutilier
n:Boutilier;Patrick
org:;Nova Scotia Department of Education
adr:;;2021 Brunswick Street;Halifax;NS;B3K 2Y5;Canada
email;internet:boutilpj@???
title:WAN Communications Specialist
tel;work:902-424-6800
tel;fax:902-424-0874
version:2.1
end:vcard