25 messages in net.sourceforge.lists.courier-usersRE: [courier-users] Re: My Modest Pro...
FromSent OnAttachments
Lloyd ZusmanFeb 11, 2004 5:26 am 
Mitch (WebCob)Feb 11, 2004 11:23 pm 
Derrick T. WoolworthFeb 12, 2004 12:31 am 
Lloyd ZusmanFeb 12, 2004 4:16 am 
Lloyd ZusmanFeb 12, 2004 4:47 am.patch
Malcolm WeirFeb 12, 2004 7:50 am 
Jon NelsonFeb 12, 2004 7:55 am 
Mitch (WebCob)Feb 12, 2004 8:30 am 
Lloyd ZusmanFeb 12, 2004 9:07 am 
Mitch (WebCob)Feb 12, 2004 9:41 am 
Lloyd ZusmanFeb 12, 2004 9:49 am 
Sam VarshavchikFeb 12, 2004 4:05 pm 
Sam VarshavchikFeb 12, 2004 4:06 pm 
Sam VarshavchikFeb 12, 2004 4:08 pm 
Matt PavlovichFeb 13, 2004 7:11 am 
Lloyd ZusmanFeb 13, 2004 7:27 am.patch
Lloyd ZusmanFeb 15, 2004 9:43 am 
Sam VarshavchikFeb 15, 2004 2:07 pm 
Lloyd ZusmanFeb 15, 2004 5:38 pm 
Sam VarshavchikFeb 15, 2004 6:10 pm 
Lloyd ZusmanFeb 15, 2004 7:49 pm.patch
Mitch (WebCob)Feb 15, 2004 8:06 pm 
Sam VarshavchikFeb 15, 2004 8:14 pm 
Lloyd ZusmanFeb 15, 2004 8:34 pm 
Sam VarshavchikFeb 16, 2004 5:19 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:RE: [courier-users] Re: My Modest ProposalActions...
From:Mitch (WebCob) (mit@webcob.com)
Date:Feb 12, 2004 9:41:47 am
List:net.sourceforge.lists.courier-users

I think that's a great idea! However, my suggestion would be to use submit to your advantage here. The "submit" protocol is well documented somewhere (I read it for over an hour the other night) and while a little unwieldy IMO it also seems like the best way to do injection.

I come from a qmail background, and it seems to me that 'submit' takes the place of qmail-inject and qmail-queue. It also seems like there might be some benefit to writing a qmail-inject-like wrapper for submit.

I like that idea... wonder how hard it would be.

One side note though - a word of warning. SpamAssassin looks at received headers and ALREADY fails to properly recognize courier's format - as a result mail received locally from an authenticated user is not detected as such and may be penalized for coming from a black hole listed IP....

I've submitted a bug report and been told that it MAY be fixed by version 2.70 - doing this could likely derail this header test again, so if you use SA you may have to code to skip it for locally authenticated users (which is probably an efficient idea anyways...)

Looking forward to the benchmarks - and also secretly wanting to try modifying a message file to see what happens. Maybe we misunderstood Sam - it is possible a modification could be ok as long as it doesn't corrupt the mime envelope?? Just a thought...

m/