RE: mail spool

[Bulent Murtezaoglu <bm@acm.org>]

    RHC> 	I never figured out how to do that one, but if you
    RHC> think about it you are forging header information.

Yes, but it was never the case that the 'message' headers or the
'envelope' headers were thought to be secure.  In the trivial
easy cases the 'received' headers are more reliable.

You can set the 'envelope from' using the -f parameter to sendmail.
Sendmail does not touch the 'message from' if its already there, in
fact [I believe] with the -t option you can set that also.  Anyway
you do not need root access to do this, and it is a kosher thing to 
do.  Sendmail just needs to be told what users other than root 
can use the -f parameter.  These users are called the trusted users
and are usually defined in the sendmail.ct file in the default Debian
installation.

cheers,

BM