www.slingcode.com/pineauthenticationwarning.php
pine have the following tag appear in their email header: X-Authentication-Warning: username owned process doing -bs If you're dealing with anti-spam countermeasures, this warning message may set off a false positive. If your a system administrator, you want to know what's causing the message and how to stop it.
sendmail the -bs option means to use the SMTP protocol to send the message. Any user using raw SMTP can forge the From: header in an email. This is sendmail letting the recipient know something is up. So, we have to ask ourself, why would a non-malicious user using a standard email package, like pine, have need to alter the From: header. And more importantly, why does this happen for some users and not for others? pinerc file which holds it's configuration: # Sets domain part of From: and local addresses in outgoing mail. user-domain= Usually the user is simply trying to strip off the hostname from the domain. That way if your mail server changes, or the client machine the user is using changes, recipients won't be storing a fully qualified host name in their address book. So the act isn't malicious afterall, the poor guy just wants to get his mail despite infrastructure changes. The problem is, if user-domain has any value set, any value at all, then pine invokes sendmail with the -bs option, and sendmail issues the "X-Authentication-Warning: ... This is most easily done by: * Get into pine * Go into the Ssetup menu * Select Config * Scroll down to the user-domain entry * And Delete the entry so it has no value * Exit the config At this point the system is going to rely on sendmail's defaults, so pine has no need to use SMTP and invoke sendmail with the -bs option. The next step is making sure that your system is doing the correct behavior of masquerading it's fully qualified host name with the domain name. cf file, it may be under /etc/mail and locate the DM entry. com')dnl Remember, once you've change sendmail's configuration, you'll have to bounce the process.
|
http://csua.com/feed/