Xref: utzoo comp.sources.unix:736 comp.mail.uucp:2272 comp.mail.sendmail:233 comp.sources.d:2936
Path: utzoo!attcan!uunet!bbn.com!rsalz
From: rsalz@uunet.uu.net (Rich Salz)
Newsgroups: comp.sources.unix,comp.mail.uucp,comp.mail.sendmail,comp.sources.d
Subject: v16INF4:  Re: Mail delivery program and IDA package
Message-ID: <1210@fig.bbn.com>
Date: 16 Nov 88 22:35:21 GMT
Followup-To: comp.sources.d
Lines: 18
Approved: rsalz@uunet.UU.NET

Submitted-by: Rich Salz
Posting-number: Volume 16, Info 4
Archive-name: /dev/null

The IDA Sendmail kit (Volume 16, issues 73 through 80) and deliver, the
Mail delivery program (Volume 16, issues 81 through 83) are both
"dangerous" systems.  If you install the IDA kit, you should disable the
DEBUG command.  If you install deliver, you should similarly be very leery
of directly executing mail messages as scripts; suppose someone puts an
"rm -rf /" in a (forged) comp.sources.unix posting?

I appreciated the irony of publishing these two packages so recently
after the Internet worm was released.

Caveat emptor!
	/rich $alz
-- 
Please send comp.sources.unix-related mail to rsalz@uunet.uu.net.