Kousuke Ebihara:
[sending email to a "|non-Postfix command" alias]
> Postfix might execute commands in a content of e-mail.

Postfix does not execute commands in the content of email messages.
Postfix creates the pipe, not the shell. For safety, Postfix has
a command_expansion_filter feature that cleans email addresses etc.
in environment variables.

Of course, you have to be careful with sending email messages into
non-Postfix commands, especially when those programs were not
written by someone with expertise in the handling of unsafe content.

        Wietse

Reply via email to