Mail Security and SUEXEC

Next topic

Author	Message
John Bolton	Wednesday 21 May 2003 7:47:46 am Due to a recent security exploit on the mailer script in one of my host's servers (Linux - Apache 1.3.27 - PHP 4.3.1), they have now implemented SUEXEC on all servers. As a result, any script that sends out mails as 'nobody' will have their outgoing mails automatically bounced by the server. I do not have email sender Nobody in site.ini or site.ini.append in v3.0-1. However new user registration information emails appear to be sent by 'Nobody' from the host server yet the activation email correctly picks up the admistrator email address as the sender. What do I need to do to avoid sending 'Nobody' for this or any other mailing forms similarly affected?
Björn Dieding@xrow.de	Sunday 25 May 2003 10:00:48 am Easy you need a vhost similar then that. <VirtualHost 217.160.187.131:80> ServerName xrow.de DocumentRoot /home/www/web11/html/xrow.de User web11 Group ftponly ScriptAlias /cgi-bin/ /home/www/web11/html/cgi-bin/ php_admin_value open_basedir /home/www/web11/ php_admin_value upload_tmp_dir /home/www/web11/phptmp/ php_admin_value open_basedir none RewriteEngine On RewriteRule !.(gif\|css\|jpg\|png\|jar)$ /index.php </VirtualHost> Looking for a new job? http://www.xrow.com/xrow-GmbH/Jobs Looking for hosting? http://hostingezpublish.com ----------------------------------------------------------------------------- GMT +01:00 Hannover, Germany Web: http://www.xrow.com/

Author

Message

Wednesday 21 May 2003 7:47:46 am

Due to a recent security exploit on the mailer script in one of my host's
servers (Linux - Apache 1.3.27 - PHP 4.3.1), they have now implemented SUEXEC on all servers. As a result, any script that sends out mails as 'nobody' will have their outgoing mails automatically bounced by the server.

I do not have email sender Nobody in site.ini or site.ini.append in v3.0-1. However new user registration information emails appear to be sent by 'Nobody' from the host server yet the activation email correctly picks up the admistrator email address as the sender.

What do I need to do to avoid sending 'Nobody' for this or any other mailing forms similarly affected?

Björn Dieding@xrow.de

Sunday 25 May 2003 10:00:48 am

Easy

you need a vhost similar then that.

<VirtualHost 217.160.187.131:80>
ServerName xrow.de
DocumentRoot /home/www/web11/html/xrow.de
User web11
Group ftponly
ScriptAlias /cgi-bin/ /home/www/web11/html/cgi-bin/
php_admin_value open_basedir /home/www/web11/
php_admin_value upload_tmp_dir /home/www/web11/phptmp/
php_admin_value open_basedir none
RewriteEngine On
RewriteRule !.(gif|css|jpg|png|jar)$ /index.php
</VirtualHost>

Looking for a new job? http://www.xrow.com/xrow-GmbH/Jobs
Looking for hosting? http://hostingezpublish.com
-----------------------------------------------------------------------------
GMT +01:00 Hannover, Germany
Web: http://www.xrow.com/

eZ debug

Timing:	Jan 18 2025 19:10:40
Script start
Timing:	Jan 18 2025 19:10:40
Module start 'layout'
Timing:	Jan 18 2025 19:10:40
Module start 'content'
Timing:	Jan 18 2025 19:10:40
Module end 'content'
Timing:	Jan 18 2025 19:10:40
Script end

Main resources:

Total runtime	0.8766 sec
Peak memory usage	4,096.0000 KB
Database Queries	54

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0112	587.9375	152.6250
Module start 'layout'	0.0112	0.0039	740.5625	39.4453
Module start 'content'	0.0152	0.8602	780.0078	523.9063
Module end 'content'	0.8754	0.0012	1,303.9141	8.1641
Script end	0.8766		1,312.0781

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0035	0.3956	16	0.0002
Check MTime	0.0016	0.1849	16	0.0001
Mysql Total
Database connection	0.0013	0.1450	1	0.0013
Mysqli_queries	0.8249	94.0964	54	0.0153
Looping result	0.0005	0.0621	52	0.0000
Template Total	0.8258	94.2	2	0.4129
Template load	0.0021	0.2361	2	0.0010
Template processing	0.8237	93.9682	2	0.4119
Template load and register function	0.0002	0.0198	1	0.0002
states
state_id_array	0.0024	0.2739	1	0.0024
state_identifier_array	0.0010	0.1176	2	0.0005
Override
Cache load	0.0017	0.1922	23	0.0001
Sytem overhead
Fetch class attribute can translate value	0.0005	0.0568	2	0.0002
Fetch class attribute name	0.0012	0.1314	3	0.0004
XML
Image XML parsing	0.0005	0.0595	2	0.0003
class_abstraction
Instantiating content class attribute	0.0000	0.0009	3	0.0000
General
dbfile	0.0033	0.3819	16	0.0002
String conversion	0.0000	0.0010	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded
1	node/view/full.tpl	full/forum_topic.tpl	extension/sevenx/design/simple/override/templates/full/forum_topic.tpl
2	content/datatype/view/ezxmltext.tpl	<No override>	extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tpl
2	content/datatype/view/ezxmltags/line.tpl	<No override>	design/standard/templates/content/datatype/view/ezxmltags/line.tpl
3	content/datatype/view/ezxmltags/paragraph.tpl	<No override>	extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tpl
1	content/datatype/view/ezimage.tpl	<No override>	extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tpl
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 10 Number of unique templates used: 6

Time used to render debug report: 0.0001 secs