You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2013/01/29 00:38:30 UTC
[Bug 6900] New: Detect Qmail + Vpopmail SMTP Auth in Received
headers
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
Bug ID: 6900
Summary: Detect Qmail + Vpopmail SMTP Auth in Received headers
Product: Spamassassin
Version: 3.3.2
Hardware: All
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Rules
Assignee: dev@spamassassin.apache.org
Reporter: massimiliano@cianelli.eu
Classification: Unclassified
Looking at Receiver.pm it will only detect Qmail when not used with vpopmail
for SMTP AUTH.
With vpopmail the auth will look as follow:
Received: from <hostname|unknown> (EHLO:HELO <something>)
(<user>@<domain>@<ip>)
by <mx.domain.xyz> with SMTP; 28 Jan 2013 21:50:51 +0100
The actual receiver string support only:
Received: from <hostname|unknown> (EHLO:HELO <something>) (<user>@<ip>)
by <mx.domain.xyz> with SMTP; 28 Jan 2013 21:50:51 +0100
May it can get fixed?
Thank you,
Regards
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6900] Detect Qmail + Vpopmail SMTP Auth in Received headers
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
--- Comment #3 from Kevin A. McGrail <km...@pccc.com> ---
The parsing from 3.3.2 to 3.4.0 (trunk) is the same in these.
ip=151.80.38.67 rdns= helo=?151.80.38.67? by=mail.it-connect.it
ident=myuser@mydomain.it envfrom= id= auth= msa=0
There is nothing in this header that implies it is authenticated in my opinion.
What am I missing?
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6900] Detect Qmail + Vpopmail SMTP Auth in Received headers
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
Massimiliano C. <ma...@cianelli.eu> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |INVALID
--- Comment #10 from Massimiliano C. <ma...@cianelli.eu> ---
Maybe I'v understand why you told me that you did not saw any authentication in
my header.
Currently seems that only one auth-patch for qmail respect the rfc3848.
Due that my server was build using another auth-patch, I'v patched
myself qmail for respect the rfc3848 and show ESMTP+A\SA when authenticated.
Now SpamAssassin recognize the authenticated users:
Received: from hostXXX-???-dynamic.183-80-r.retail.telecomitalia.it (HELO
?192.168.2.19?) (postmaster@<mydomain>@80.183.???.XXX)
by mail.<mymxdomain>.it with ESMTPA; 3 Feb 2013 20:59:50 +0100
X-Spam-RelaysTrusted: [ ip=80.183.???.XXX
rdns=hostXXX-???-dynamic.183-80-r.retail.telecomitalia.it
helo=?192.168.2.19?
by=mail.<mymxdomain>.it ident=postmaster@<mydomain> envfrom= intl=1 id=
auth=ESMTPA msa=0 ]
I'll mark the bug as Invalid, due it isnt a bug of SpamAssassin.
Thank you,
Regards
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6900] Detect Qmail + Vpopmail SMTP Auth in Received headers
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
--- Comment #7 from Massimiliano C. <ma...@cianelli.eu> ---
The problem is, if it will not recognize it is an authenticated users, all
users will get catched by the Dynablock, due too many (me too) use the mail
from the smartphone.
Looking at the code, seems only a problem in the way it will try to recognize
it is an authenticated user.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6900] Detect Qmail + Vpopmail SMTP Auth in Received headers
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
--- Comment #9 from Massimiliano C. <ma...@cianelli.eu> ---
(In reply to comment #8)
> (In reply to comment #7)
> > The problem is, if it will not recognize it is an authenticated users, all
> > users will get catched by the Dynablock, due too many (me too) use the mail
> > from the smartphone.
> >
> > Looking at the code, seems only a problem in the way it will try to
> > recognize it is an authenticated user.
>
> There is nothing in that header that implies it is authenticated to me and I
> can't find existing code that you reference because it only changed the
> ident= output.
>
> Is there existing code in Received.pm that you think is close to what you
> want that just needs a tweak for user@domain@ip as opposed to user@ip?
Non authenticated user:
Received: from eir.zones.apache.org (140.211.11.115)
by mx.it-connect.it with SMTP; 31 Jan 2013 00:48:32 +0100
Authenticated users:
Received: from unknown (HELO ?151.80.38.67?) (myuser@mydomain.it@151.80.38.67)
by mail.it-connect.it with SMTP; 28 Jan 2013 21:50:51 +0100
When <user>@<domain.ext>@<from ip addr> is showed, it is the authenticated
user.
Maybe I'm wrong, if I tought that the code at lines 851-862 was used for bypass
dynablock if there is an authenticated user?
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6900] Detect Qmail + Vpopmail SMTP Auth in Received headers
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
--- Comment #4 from Kevin A. McGrail <km...@pccc.com> ---
NOTE: I added a test to rcvd_parser.t (search 6900) if an issue is identified.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6900] Detect Qmail + Vpopmail SMTP Auth in Received headers
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
--- Comment #5 from Kevin A. McGrail <km...@pccc.com> ---
So if I modify your header to just
Received: from unknown (HELO ?151.80.38.67?) (myuser@mydomain.it)
by mail.it-connect.it with SMTP; 28 Jan 2013 21:50:51 +0100
I get:
ip=mydomain.it rdns= helo=?151.80.38.67? by=mail.it-connect.it ident=myuser
envfrom= id= auth= msa=0
So what is the output you are trying to get? the ident=myuser where it strips
the extra info?
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6900] Detect Qmail + Vpopmail SMTP Auth in Received headers
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
Kevin A. McGrail <km...@pccc.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |kmcgrail@pccc.com
--- Comment #1 from Kevin A. McGrail <km...@pccc.com> ---
Have you looked at the version in 3.4.0?
Can you give me a valid Received header and I'll add a test case and see if it
passes?
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6900] Detect Qmail + Vpopmail SMTP Auth in Received headers
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
Massimiliano C. <ma...@cianelli.eu> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |massimiliano@cianelli.eu
--- Comment #2 from Massimiliano C. <ma...@cianelli.eu> ---
Hi,
This is the receiver header:
Received: from unknown (HELO ?151.80.38.67?) (myuser@mydomain.it@151.80.38.67)
by mail.it-connect.it with SMTP; 28 Jan 2013 21:50:51 +0100
I'v just hidden my email address.
And, no, I'vnt gived a look at 3.4.0.
I'll do now and let you know.
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6900] Detect Qmail + Vpopmail SMTP Auth in Received headers
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
--- Comment #8 from Kevin A. McGrail <km...@pccc.com> ---
(In reply to comment #7)
> The problem is, if it will not recognize it is an authenticated users, all
> users will get catched by the Dynablock, due too many (me too) use the mail
> from the smartphone.
>
> Looking at the code, seems only a problem in the way it will try to
> recognize it is an authenticated user.
There is nothing in that header that implies it is authenticated to me and I
can't find existing code that you reference because it only changed the ident=
output.
Is there existing code in Received.pm that you think is close to what you want
that just needs a tweak for user@domain@ip as opposed to user@ip?
--
You are receiving this mail because:
You are the assignee for the bug.
[Bug 6900] Detect Qmail + Vpopmail SMTP Auth in Received headers
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6900
--- Comment #6 from Massimiliano C. <ma...@cianelli.eu> ---
(In reply to comment #3)
> The parsing from 3.3.2 to 3.4.0 (trunk) is the same in these.
>
> ip=151.80.38.67 rdns= helo=?151.80.38.67? by=mail.it-connect.it
> ident=myuser@mydomain.it envfrom= id= auth= msa=0
>
> There is nothing in this header that implies it is authenticated in my
> opinion. What am I missing?
myuser@mydomain.it is the authenticated user.
--
You are receiving this mail because:
You are the assignee for the bug.