Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!watmath!clyde!cbatt!cbuxc!cbuxb!cbrma!ask
From: ask@cbrma.UUCP (A.S.Kamlet)
Newsgroups: comp.unix.questions
Subject: Re: Anonymous mail
Message-ID: <5357@cbrma.UUCP>
Date: Wed, 5-Nov-86 17:46:08 EST
Article-I.D.: cbrma.5357
Posted: Wed Nov  5 17:46:08 1986
Date-Received: Fri, 7-Nov-86 21:50:43 EST
References: <387@cullvax.UUCP>
Reply-To: ask@cbrma.UUCP (A.S.Kamlet(Art))
Organization: AT&T Bell Laboratories
Lines: 29

In article <387@cullvax.UUCP> news@cullvax.UUCP (Mail and USENET News System maintenance account) writes:
>We are considering putting in an 'anonymous mail' facility, for use as
>a suggestion box.  The question is, is there an easy/known way to
>implement it.  I tried putting a line
>
>	anonymous: "| awk ' NR != 1 && ! /^From:/ {print} ' | sendmail xxx"
>
>in /usr/lib/aliases, so that awk would strip identifying lines from
>the message and then pass them to sendmail for routing to the eventual
>reader.  Unfortunately, sendmail (when delivering to anonymous), runs
>the command under the username of the sender of the message (which
>isn't documented, but makes sense from a security point of view), so
>the inner sendmail puts the original sender's name on it.
>
>The only simple solution which comes to mind is to write a C program
>that acts like the shell in setting up the pipe, and make the program
>suid to our 'news' account.  Is there a better way?
>
>Dale

Have you considered establishing a login "anon" which puts anyone
who logs in right into mail?

There would never be a record of who was on the system -- really anonymous.

(For security, you may want to modify mail to prevent an escape
to a subshell.)
-- 
Art Kamlet   AT&T Bell Laboratories  Columbus  {cbosgd | ihnp4}!cbrma!ask