Path: utzoo!utgpu!jarvis.csri.toronto.edu!rutgers!tut.cis.ohio-state.edu!purdue!decwrl!nsc!icldata!altos86!clp
From: clp@altos86.UUCP (Chuck L. Peterson)
Newsgroups: comp.unix.wizards
Subject: 3 line fix for forged mail
Message-ID: <1136@altos86.UUCP>
Date: 24 May 89 05:59:15 GMT
Organization: Altos, San Jose, CA
Lines: 15

It seems to me that sendmail should disallow connections from
ports which were not originated from priviledged ports using
code similar to that in rlogind:

	if (fromp->sin_family != AF_INET ||
	    fromp->sin_port >= IPPORT_RESERVED)
		fatal(f, "Permission denied");

/usr/lib/sendmail should also be changed to obtain the "from" machine 
name using the internet number in sin_addr.
Only Wizards should be asked for a machine name.
If this has already been fixed; never mind (in gilda font).

Chuck L. Peterson
clp@altos.com