8 messages in net.sourceforge.lists.courier-users[courier-users] Re: Emails with '&' i...
FromSent OnAttachments
cour...@pro-technica.comDec 2, 2003 11:29 am 
Jeff JansenDec 2, 2003 3:00 pm 
Sam VarshavchikDec 2, 2003 3:56 pm 
Mitch (WebCob)Dec 2, 2003 6:45 pm 
cour...@pro-technica.comDec 2, 2003 11:31 pm 
Gordon MessmerDec 2, 2003 11:57 pm 
cour...@pro-technica.comDec 3, 2003 12:23 am 
Gordon MessmerDec 3, 2003 9:50 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[courier-users] Re: Emails with '&' in sender address... againActions...
From:cour...@pro-technica.com (cour@pro-technica.com)
Date:Dec 3, 2003 12:23:38 am
List:net.sourceforge.lists.courier-users

Gordon Messmer writes:

cour@pro-technica.com wrote:

My /etc/courier/maildroprc: import SENDER import RECIPIENT import HOME ... xfilter "/usr/sbin/amavis $FROM $RECIPIENT"

There you go.... never ever do this. Rather:

import SENDER import RECIPIENT SH_SENDER=escape($SENDER) SH_RECIPIENT=escape($RECIPIENT) if ($SH_SENDER eq "") { SH_SENDER="unknown" } xfilter "/usr/sbin/amavis $SH_SENDER $SH_RECIPIENT"

I already remove $FROM in calling amavis. This is not problem becouse virus report is send directly from amavis to me ( postmaster@ ). amavis in fact is modified from me compiled perl script based on original amavis. In report that I receive have copy of entire headers of every infected file, so I know from and to was sended infected email. But I can't locate in docs this 'escape()'. It is not documented or I miss something?

-- Svetozar Mihailov