sendmail unsupport -X option in cytopia/php-fpm-5.6:0.8.1 about devilbox HOT 6 CLOSED

All PHP dockers have postfix installed.
Can you tell me what the -X option is for?

(The only info I found about -X was here: https://news.ycombinator.com/item?id=13268692)

from devilbox.

X is simply not implemented in the sendmail binary that is provided by postfix. What do you need it for? In case you were trying the PHPMailer/SwiftMailer RCE vulnerability, as far as I see postfix installations are not affected because the do not provide the necessary command line options.

Your "fix" with installing sendmail introduces a conflict as you now have two MTAs installed, not a good idea.

from devilbox.

@cebe thanks for the explanation.

@hxer what exactly are you using it for?

from devilbox.

as @cebe says, in this case, I was trying the PHPMailer RCE vulnerability.

from devilbox.

@hxer
If you can come up with a way to have both, postfix and sendmail installed in parallel, I can make it a startup option within the .env file. If both cannot be installed in parallel, I am afraid I cant help it and you will have to manually re-install sendmail on the respective php docker.

I will close this issue, as it cannot be fixed (because I am using postfix for all php dockers).
If you get it to work somehow to have them both installed at the same time, please re-open and let me know how. I will then integrate it.

from devilbox.

Unless there is a very good reason and very careful configuration, having two MTAs on one machine can cause a lot of trouble so I would vote against doing that.

from devilbox.