Path: utzoo!dptcdc!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!bloom-beacon!apple!vsi1!lmb
From: lmb@vicom.COM (Larry Blair)
Newsgroups: news.software.b
Subject: Re: change of From: header
Message-ID: <1642@vicom.COM>
Date: 18 Apr 89 17:22:36 GMT
References: <12227@paris.ics.uci.edu>
Reply-To: lmb@vicom.COM (Larry Blair)
Organization: VICOM Systems Inc., San Jose, CA
Lines: 21

In article <12227@paris.ics.uci.edu> nagel@beaver.ics.uci.edu (Mark Nagel) writes:
=We use mini-inews to post from non-server machines via NNTP.  It works
=just fine, however, at times I've noticed that some people's articles
=will be sent with the From: header saying the article was posted by
=news rather than the actual poster.  In addition, the .signature file
=from the news login is appended.  This is very rare, but it still is
=a bit disconcerting.  If anyone knows of an explanation for this 
=behavior, I'd appreciate hearing it.  I run B News 2.11.14 and NNTP 1.5.3.

The behavior is caused by "inews" processing articles that were queued when
posted, usually because "expire" was running.  You undoubtedly have DOGETUSER
defined in your defs.h file, which causes "inews" to do a getuser() rather
than accept the From: generated by the newsposter.

I've thought about correcting this, but it would require that the user
verification be performed in the newsposter rather than "inews".  Since
any of our users is quite capable of circumventing any scheme I devise
for preventing forgeries, it wasn't worth it.  Hopefully TMN News will
address this problem.
-- 
Larry Blair   ames!vsi1!lmb   lmb@vicom.com