send mail

You see that you now have a new menu named Plug-ins and that on this menu the Send Mail plug-in is available as shown in figure 24.

The sendmail command will respond with a message advising which IDs can be resolved to a mailer command.

Postfix, like Sendmail, does a number of security checks, but Postfix is also designed as a set of modules that minimize privilege.

For this process to work, on the AIX server side I had to make a couple of changes to my Sendmail configuration.

The immediate cause of the vulnerability was that one of Sendmail's security checks was flawed, permitting a buffer overflow.

The -bd flag starts Sendmail as a daemon (running in the background) as a Simple Mail Transfer Protocol (SMTP) mail router.

A mailer table in Sendmail can be used to override routing for particular domains, which are not local host names.

Its main claim to fame is as a helper tool for the popular sendmail mailer configuration file.

Again, I could use the Sendmail mailertable entry here, but I also needed a way to handle the unusual SMTP port.

Thus, any flaw in Sendmail can give an attacker immediate control over the entire system.

This article shares two interesting tricks that I discovered with Sendmail on AIX.

Sendmail's configuration file has an entire book devoted to it.

More specifically, its static sendMail method is responsible for the effort.

As a network application, sendmail listens on network ports.

Attackers could then use this fact to overwrite critically important data and take control of Sendmail.

Use the sendmail function to include the primary business logic and the code for creating and displaying Dojo widgets.

The sendMail method constructs the e-mail and uses the JavaMail API to send the notification to recipients.

I'm not sure what prevented them from providing a solution, but it gave me a chance to develop my Sendmail skills!

To send the e-mail message, the script uses another venerable UNIX utility called sendmail.

Analyzing large programs like Sendmail (approximately 50, 000 lines of code) is no easy task.

The mail exchanger records are used by mail transport agents like sendmail and postfix when looking up where to send e-mail.

Some common candidates that are used under wrappers for access control are telnet, ssh, sendmail, ftp packages, pop3, and stunnel.

In theory, they could immediately switch to . forward files or their non-sendmail equivalents to get the same effects.

As a result, Postfix is generally accepted as a more secure program than Sendmail.

Finally the sendMail method will send an email with the failing report, using the JavaMail API.

Listing 2 shows the files open for the sendmail process with the txt files filtered out.

The sendmail configuration is neither fun nor pretty.

Most administration books are full of code; they have sendmail.

Notice the control element in the sendmail blocks.

However, the makers of sendmail wrote a set of M4 macros to make the process easier.

In this example, Sendmail will process the mail queue every 30 minutes.

Sendmail has been included with the AIX operating system for many years now.

In fact, a clever attack against Sendmail was based on this insight.

cf examples, lots of shell scripts, explanations of top's command-line arguments, and so on.

Exchange would route the e-mail to SAPRPT@aixmta01, the AIX Sendmail server.

More information on sendmail is available in Chapter 7.

Service sendmail restart Service xinetd restart

Execute the following command to display the status of the Sendmail daemon

For example, Listing 4 is the M4 macro version of a typical sendmail configuration file

To start the Sendmail daemon, use the startsrc command. For example

A mail transfer agent such as Sendmail 8. 7 or later