Subject: Re: Disabling "CTRL+O" postpone feature of pine.

From: Veronica Loell <[email-masked]>
Date: Sat, 11 May 2002 17:32:39 +0100 (W. Europe Standard Time)

Only disabling the postpone feature will not help totally against people using other peoples addresses on purpose. The "From:" and "Reply-To:" fields will also be presented whenever one uses a "Role" for composing email. Of course they could also easily set up "Roles" with other peoples email-adresses in it. So for the idea to work full out you also need to disable any use of "Roles".
Mightn't this be better handled by interrupting email sent and comparing it to the current user before allowing it to pass on, I'm no expert in pine or unix, but I would think that could be done?
As the use of "Roles" is just as easy to use as the postpone-feature you should at least take this in consideration.

- Veronica Loell

>
>Subject: Disabling "CTRL+O" postpone feature of  pine.
>   From: SANJAY CHAUDHARY     /INFRA/INFOTECH
>	 <[email-masked]>
>   Date: Sat, 11 May 2002 19:13:22 +0530
>     To: Pine Discussion Forum <[email-masked]>
>
>This message is in MIME format. Since your mail reader does not understand
>this format, some or all of this message may not be legible.
>
>------_=_NextPart_001_01C1F8F1.D13E4390
>Content-Type: text/plain;
>	charset="iso-8859-1"
>
>Sir,
>
>	 I have found many times user send mails using other users e-mail
>address. They do it bye using the  pine  message postpone feature, user
>press the  key sequence "CTRL+o" and postpone their mail. Next time when
>user  opens the pine, he is asked the following  question
>	"Continue postponed composition (answering "No" won't erase it)?"
> 	When  user  presses  "y" on the  keyboard the messages compose
>window comes up and it shows  "from" and "to" address. You can actually
>change the  "from"  mail id.
>	I am  using Solaris 2.6 and pine veer 4.21. I have disabled pine
>suspension in pine.conf.fixed in /usr/local/lib.  The pine.conf.fixed
>contains: 
> 
>feature-list=no-enable-unix-pipe-cmd,no-enable-alternate-editor-cmd,no-enabl
>e-suspend,no-enable-alternate-editor-implicitly,auto-move-read-msgs. The
>ownerships of files are given below: 
>
>	Could  please  guide me how do I disable postpone  message of  pine.
>Please  revert back.
>
>
>with warm regards
>Sanjay C.
>
>-- 
>
>
>"This e-mail message may contain confidential, proprietary or legally privileged information. It 
>should not be used by anyone who is not the original intended recipient. If you have erroneously 
>received this message, please delete it immediately and notify the sender. The recipient 
>acknowledges that ICICI Bank or its subsidiaries and associated companies,  (collectively "ICICI 
>Group"), are unable to exercise control or ensure or guarantee the integrity of/over the contents of the information contained in e-mail transmissions and further acknowledges that any views 
>expressed in this message are those of the individual sender and no binding nature of the message shall be implied or assumed unless the sender does so expressly with due authority of ICICI Group.Before opening any attachments please check them for viruses and defects." 
>
>
>
>------_=_NextPart_001_01C1F8F1.D13E4390
>Content-Type: text/html;
>	charset="iso-8859-1"
>Content-Transfer-Encoding: quoted-printable
>
><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
><HTML>
><HEAD>
><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
><META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
><TITLE>Disabling &quot;CTRL+O&quot; postpone feature of  pine.</TITLE>
></HEAD>
><BODY>
>
><P><FONT FACE="Zurich BT">Sir,</FONT>
></P>
>
><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<FONT FACE="Zurich BT"> I have found many times user send mails using other users e-mail address. They do it bye using the&nbsp; pine&nbsp; message postpone feature, user press the&nbsp; key sequence &quot;CTRL+o&quot; and postpone their mail. Next time when user&nbsp; opens the pine, he is asked the following&nbsp; question</FONT></P>
>
><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<B> <FONT FACE="Zurich BT">&quot;Continue postponed composition (answering &quot;No&quot; won't erase it)?&quot;</FONT></B>
><BR><B><FONT FACE="Zurich BT">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</FONT></B> <FONT FACE="Zurich BT">When&nbsp; user&nbsp; presses&nbsp; &quot;y&quot; on the&nbsp; keyboard the messages compose window comes up and it shows&nbsp; &quot;from&quot; and &quot;to&quot; address. You can actually change the&nbsp; &quot;from&quot;&nbsp; mail id.</FONT></P>
>
><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT FACE="Zurich BT">I am&nbsp; using Solaris 2.6 and pine veer 4.21.</FONT> <FONT FACE="Zurich BT">I have disabled pine suspension in pine.conf.fixed in /usr/local/lib.&nbsp; The pine.conf.fixed contains: </FONT></P>
>
><P><FONT FACE="Zurich BT">&nbsp;feature-list=no-enable-unix-pipe-cmd,no-enable-alternate-editor-cmd,no-enable-suspend,no-enable-alternate-editor-implicitly,auto-move-read-msgs. The ownerships of files are given below: </FONT></P>
>
><P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT FACE="Zurich BT">Could&nbsp; please&nbsp; guide me how do I disable postpone&nbsp; message of&nbsp; pine. Please&nbsp; revert back.</FONT>
></P>
><BR>
>
><P><FONT FACE="Zurich BT">with warm regards</FONT>
><BR><FONT FACE="Zurich BT">Sanjay C.</FONT>
></P>
>
><P>
><FONT FACE="Zurich BT" SIZE=1 COLOR="#0000ff"><P>"This e-mail message may contain confidential,
> proprietary or legally privileged information. It should not be used by anyone who is not the 
>original intended recipient. If you have erroneously received this message, please delete it 
>immediately and notify the sender. The recipient acknowledges that ICICI Bank or its subsidiaries and associated companies,  (collectively "ICICI Group"), are unable to exercise control or ensure or guarantee the integrity of/over the contents of the information contained in e-mail 
>transmissions and further acknowledges that any views expressed in this message are those of the individual sender and no binding nature of the message shall be implied or assumed unless the 
>sender does so expressly with due authority of ICICI Group.Before opening any attachments please check them for viruses and defects."
></P>
></FONT>
>
></BODY>
></HTML>
>------_=_NextPart_001_01C1F8F1.D13E4390--
>-- 
>-----------------------------------------------------------------
> For information about this mailing list, and its archives, see: 
> http://www.washington.edu/pine/pine-info/
>-----------------------------------------------------------------

---

From: Jo Knox <[email-masked]>
Date: Mon, 13 May 2002 10:14:05 -0800 (AKDT)

Unless you have a completely captive environment, disabling this ability
in Pine won't stop someone who really wants to change their return address
from doing so.  You're describing a lot of work to take out a feature
anyone can get just by a telnet to the SMTP port and manually entering
headers and message!

jo

On Sat, 11 May 2002, Veronica Loell wrote:

> Only disabling the postpone feature will not help totally against
> people using other peoples addresses on purpose. The "From:" and
> "Reply-To:" fields will also be presented whenever one uses a "Role"
> for composing email. Of course they could also easily set up "Roles"
> with other peoples email-adresses in it. So for the idea to work full
> out you also need to disable any use of "Roles". Mightn't this be
> better handled by interrupting email sent and comparing it to the
> current user before allowing it to pass on, I'm no expert in pine or
> unix, but I would think that could be done? As the use of "Roles" is
> just as easy to use as the postpone-feature you should at least take
> this in consideration.
>
> - Veronica Loell
>
> >