Path: utzoo!attcan!uunet!auspex!guy
From: guy@auspex.UUCP (Guy Harris)
Newsgroups: comp.protocols.tcp-ip
Subject: Re: Internet VIRUS alert
Message-ID: <420@auspex.UUCP>
Date: 9 Nov 88 18:36:07 GMT
References: <8811052345.AA18501@okeeffe.Berkeley.EDU> <2624@sultra.UUCP>
Reply-To: guy@auspex.UUCP (Guy Harris)
Organization: Auspex Systems, Santa Clara
Lines: 8

>I agree with the first poster.  It is a BIG security hole.  I can understand
>the justification for piping incoming mail to a process, but this should be
>done via the 'aliases' file, not the To: line.

I suspect the second poster agrees with you; the example he gave is
probably implemented via the "aliases" file.  The notion of delivering
mail to a program is not flawed; the problem is that this should only be
at the discretion of the recipient, not the sender.