On Fri, Feb 5, 2010 at 08:46, Mark Martinec <mark.martinec+ama...@ijs.si> wrote: > Otávio, > >> I'm developing an different purpose application based on Amavisd-New >> with Amavisd::Custom and my own modules. But, I would like to change >> the "delivery_method" on the fly, and I'm having some trouble with >> Taint Mode: >> >> i.e: >> >> sub before_send { > [...] >> my $ip_addr_received_hdr = parse_ip_address_from_received( $msginfo, 1 > [...] >> $msginfo->delivery_method( >> $ip_addr_received_hdr >> ? "smtp:[$ip_addr_received_hdr]:25" >> : c('notify_method') > > >> Feb 4 20:42:58 bsd amavis[19521]: (19521-01) mail_via_smtp: session >> failed: Insecure dependency in connect while running with -T switch at >> /usr/local/lib/perl5/5.8.9/mach/IO/Socket.pm line 114, <GEN21> line >> 44. > > A result from parse_ip_address_from_received comes tainted, which is > to be expected as it is derived from untrustworthy data. If you want > to use it for setting up e.g. a delivery method, you need to untaint > it, after first checking that the value is sane. > > There is a function untaint(), which can be imported from Amavis::Util, > the same module you import a do_log from. > > .< ? "smtp:[$ip_addr_received_hdr]:25" > .> ? untaint("smtp:[$ip_addr_received_hdr]:25") > > > Mark > > ------------------------------------------------------------------------------ > The Planet: dedicated and managed hosting, cloud storage, colocation > Stay online with enterprise data centers and the best network in the business > Choose flexible plans and management services without long-term contracts > Personal 24x7 support from experience hosting pros just a phone call away. > http://p.sf.net/sfu/theplanet-com > _______________________________________________ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/
Hello Mark, Work's pretty well! thank you indeed. -- Otávio Fernandes <otaviof at gmail.com> http://blog.emresumo.com ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/