env_from for virus message

Hi all. Hi Jason.

There's probably a good reason for it, but I was wondering
why 
Jason's code doesn't insert
the virus from address into the qmail-inject call in
qmail-scanner-queue.pl
which generates the quarantine report. I noticed the
envelope-from wasn't set.

  open(SM,"|$qmailinject -h -f
''")||&error_condition("cannot open 
$qmailinject for sending quarantine report - $!");
(actual)

vs.

  open(SM,"|$qmailinject -h -f
$V_FROM")||&error_condition("cannot 
open $qmailinject for sending quarantine report -
$!");

Thanks.
John



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking
scripting language
that extends applications into web and mobile media. Attend
the live webcast
and join the prime developer group breaking into this new
coding territory!
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-generallists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/q
mail-scanner-general

john crawford wrote:
> Hi all. Hi Jason.
>
> There's probably a good reason for it, but I was
wondering why Jason's
> code doesn't insert
> the virus from address into the qmail-inject call in
> qmail-scanner-queue.pl
> which generates the quarantine report. I noticed the
envelope-from
> wasn't set.
>
>  open(SM,"|$qmailinject -h -f
''")||&error_condition("cannot open
> $qmailinject for sending quarantine report -
$!");
> (actual)
>
> vs.
>
>  open(SM,"|$qmailinject -h -f
$V_FROM")||&error_condition("cannot open
> $qmailinject for sending quarantine report -
$!");

Because the former means it has a NULL email address - which
means MTAs
won't generate bounces back to it.

Basically all alerts generated by Qmail-Scanner have an
empty/NULL
Return-Path so that they appear and are treated like bounce
mail
messages. i.e. no reply is every automatically generated to
them.

i.e. it's a feature - not a bug

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB
FE1D 66D1



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking
scripting language
that extends applications into web and mobile media. Attend
the live webcast
and join the prime developer group breaking into this new
coding territory!
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-generallists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/q
mail-scanner-general