Block rmail by default
The default set of authorized commands is "rnews rmail" per the Taylor UUCP documentaiton. The way rmail works -- generally injecting a message in such a way that the MTA sees it as originating locally -- can open up a UUCP node to unahtorized mail relay attacks. Since it looks like rmail isn't being used across the Tilde UUCP right now, just block it by default.
This commit is contained in:
parent
8300b0f67b
commit
78fec632b6
|
@ -88,6 +88,7 @@ sub generateSys {
|
|||
chat-timeout 60
|
||||
protocol t
|
||||
port $currentNode
|
||||
commands rnews
|
||||
};
|
||||
|
||||
open(FH, '>>', $sysFile);
|
||||
|
|
Reference in New Issue