re: Alternative from addresses in emails (diff output, and fixed)

See below for diff -u output. This is based on the development branch
0.9a9. The last message I sent had a bug where the "To:" address wasn't
set so sometimes the messages arrived to "Undisclosed recipients." That
is fixed now.

These will be helpful for those of you who want a configurable FROM:
address, or the ability to send a mix of encrypted/plaintext reports.

The first patch converts the bro report/notice mailing scripts and
config file to use sendmail instead of mail. This allows the
configuration of BRO_EMAIL_FROM in bro.cfg, which specifies the From:
address on outgoing messages.

The second patch expands on the first patch slightly and adds in a failover
mode in the script which will send plaintext if the gpg process fails.
I put this in so that you could have some copies of the reports encrypted if you had the
public key for the recipient, and leave others in plaintext if the key did not exist.
There should be a more elegant way to check if public key exists and do the checking that
way. Right now I'm just basing it off the process failing, but it should do key checking.

* Be very careful with the second patch one as you could be sending plaintext when you
don't wish it if you have errors with gpg keys, etc. *

You can add in the second patch on top of the first one, but don't try it by itself.

To apply either of these do:
cd /path/to/bro-tar-unpacked/scripts
patch < patchfile




--- bro.cfg.example 2004-12-03 09:37:44.000000000 -0800
+++ ../../BRO/bro.cfg.example 2005-07-26 14:47:56.000000000 -0700
@@ -106,6 +106,9 @@
# Email address for local reports to be mailed to

+# Email address to send from