Sendmail Authentication-Warning: nobody set sender to user<me@my.com>

[cibee]

Hi all,
I am running sendmail an in /var/log/maillog I get this warning.

Authentication-Warning: nobody set sender to user<me@my.com> using -f

I figured that Its got to do with trusted user and hence I added nobody to trusted user by adding define(`confTRUSTED_USERS', nobody)dnl on sendmail.mc and generating new sendmail.cf and restarted sendmail.

But this still generates the warning. Anyone had simillar problems? Any lead is appreciated.

Thanks in advance,
Cibee.

 

[cibee]

Giving it an other shot,
I wanted to know if this kind of warning makes the mail a likely spam?
How would I go about eleminating such warnings.

TIA
Cibee

 

[ericbrunson]

Apache commonly runs as "nobody". Do you have a webserver on that machine?

 

[cibee]

Hi Eric,

Yes, There is a web server running on that machine.

 

[ericbrunson]

There's probably a CGI that sends mail and is setting the from with a -f. Common practice, but subject to exploit if you don't limit the destination.

 

[cibee]

Yeah there is a mail being sent out to users based on the info they have provided while they register (stored in a db). How would I go about limiting the destination in this case?
Would a mail with such warning be considered as a likely spam?

 

[ericbrunson]

A spammer might put in a destination address that they want to send spam to if they could attach some sort of payload to it. I'd have to see the web page and understand its purpose in order to really tell you anything more.

 

[cibee]

Hi Eric,
Got a email where I could send u details?

 

[ericbrunson]

last name at last name dot com.

 

[cibee]

Hi Eric,
sent a mail to u.

 

[cibee]

Got this resolved, actually It wasn't the sendmail it was one of the perl modules(MIME::Lite) that I was using created the warning.

http://mojo.skazat.com/support/documentation/perllib_MIME_Lite.pm.html