Re: Antigen found =*.pif file
Martijn van Oosterhout <kleptog@svana.org> writes:
> Richard Kettlewell wrote:
>> Some MTAs do indeed qualify random unqualified addresses they find
>> with their own mail domain name.
>
> The reason is so the you can type mail <username> and have it end up at the
> right place. i.e. you don't need to know the mail domain to send a mail to
> the local user. They also fix the from address so that if the message is
> forwarded offsite, the reply still makes it.
That's a reason for "fixing" the addresses on locally submitted mail,
and I agree that it's reasonable to do this in the MTA.
But the message in question was one received from the public internet.
Obviously it shouldn't be mangled this way, as doing so created a
misleading address in exactly the way that someone commented on. It
should be passed through unchanged (or possibly rejected, if local
policy is really that tight).
FWIW, none of the software which that message passed through on its
way to me "fixed" it in this broken way. After initial injection it
only passed through Debian machines running Qmail and Exim.
>> Surely it's utterly obvious that this is a bug? Are any of the
>> faulty machines running Debian?
>
> Well, it would be a bug to qualify random addresses received in
> headers. But when a message comes in, when is it allowed to qualify
> it and when not?
The information required to get this right is already available to the
MTA: you need to know which messages are from your authorized clients
and which from the rest of the world anyway, to avoid being used as a
spam relay.
Exim already gets this right: qualify_domain is only applied to
locally-generated messages (and you can define which hosts this
applies to). I'm not familiar with Qmail but from its behaviour it
appears to do the right thing too.
--
http://www.greenend.org.uk/rjk/
There is no need to CC me on postings to debian-devel, I read the
list.
--
To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: