Subject: pine and sendmail 8.6.10

From: [email-masked] (Jim Simmons)
Date: 23 Feb 1995 17:54:50 GMT

After installing sendmail 8.6.10 I'm getting spurious "POSSIBLE ATTACK"
messages in syslog.  Apparently pine is sending some lists of mail
recipients with newlines in the list.  You see something like this in the
syslog (names have been changed to protect the guilty):

Feb 23 09:47:07 testsys sendmail[892]: POSSIBLE ATTACK from
jsmith@localhost: newline in string "Mike Smith <[email-masked]>,
    Teresa Jones <[email-masked]>,      Jeff Green
<[email-masked]>"

This is pine 3.91 on a SunOS 4.1.3 machine.

Anybody have a way around this (other than not using pine or completely
disabling the check in sendmail 8.6.10)?  It's adding a lot of junk to our
log files.

Thanks,

Jim

---

From: Steve Hubert <[email-masked]>
Date: Sat, 25 Feb 1995 20:13:38 -0800 (PST)

If you set pine's smtp-server to something this won't happen.  It's
happening when sendmail reads the header lines with the -t option. 
Alternatively, in comp.mail.sendmail, Eric Allman has suggested simply
commenting out the warning message in sendmail for now. 

Steve Hubert <[email-masked]>
Networks and Distributed Computing, Univ. of Washington, Seattle