Bug#359905: PTS: unsubscription fraud possible
On Wed, 12 Apr 2006, MJ Ray wrote:
> > > I probably need to understand how mail gets into the system
> > > better before I can see how to prepare the bounce handler.
> >
> > That's easy to check. Login in master and check
> > /org/packages.qa.debian.org/mail/.
>
> I don't understand how that could do per-user bounce headers.
Well the difficult part is handling the bounces not implementing VERP.
VERP is already mostly done: see this patch:
http://wiki.debian.org/qa.debian.org/pts?action=AttachFile&do=get&target=dispatch-VERP.patch
So I was pointing you to how we associate an email address to a script so
that you can discover "dispatch.pl" which extracts the local part of the
email and does something based on it.
Please check http://wiki.debian.org/qa.debian.org/pts for some details on
how I imagine the bounce handling.
> BEGIN PATCH:
FWIW, the unsubscribeall is not documented and is what I use to
unsubscribe problematic emails. So the standalone script should
do that (and still leave the option to mail the problematic email
since it allows people to notice unsubscription due to temporary problems
that generated non-temporary failures...).
Otherwise the patch looks sane. I'll see if I can apply it and test it in
the next week. (BTW, I prefer patch as attachment since it avoids a
cut&paste in a new file)
Cheers,
--
Raphaël Hertzog
Premier livre français sur Debian GNU/Linux :
http://www.ouaza.com/livre/admin-debian/
Reply to: