Re: [apps-discuss] Comments on Malformed Message BCP draft

Hector Santos <[email protected]>
Newsgroups gmane.ietf.rfc822,gmane.ietf.apps-discuss
Organization Santronics Software, Inc.
Message-ID <[email protected]>
Murray S. Kucherawy wrote:

> The intended status of this document doesn't give any kind 
> of standard status to malformations.  It recommends the safest 
> way of handling them if you're in an environment where you have 
> to do so rather than simply rejecting them.  And the reality is 
> that we (the industry) usually have to do that, so it seems like 
> a good idea to share the collected wisdom about the best/safest 
> way to do so.

and cheapest too.  As you implied, the cheapest route maybe to white 
list these "good" but malformed messages.

Off the top of my head:

A missing Date:,  technically a RFC5322 requirement, may arrived 
missing, so many packages offer an AddDateIfMissing=YES/NO option.

Another area that has always been sensitive and evolved over time, was 
detecting what was a valid message.

Some SMTP systems will allow you to enter a DATA payload without any 
RFC 822/2822/5322 headers.

But for detecting it, it evolved over the years

         822 - required FROM, DATE: TO/CC:
        2822 - relaxed to required FROM, DATE:
        5322 - same as 2822

I seem to recall an old I-D by Keith to even further relaxed From: :)

Our package added another check with a Received: line detection since 
you need at least 1 to be a received message.

Anyway, a few years back a version defaulted on compliancy and also 
adding the AddDateIfMissing option and almost immediately, we got some 
valid mail Missing Dates complaints.  Telling them to enable the 
option fixed that.  I don't recall many other complaints and that 
reflect my theorem:

     Most good systems are compliant, Most bad systems are not.

which strongly correlates to:

     All good systems complain, ALL bad systems do not.

which tells me its cheapest to just deal with it manually and don't 
try to automate it.

-- 
Hector Santos, CTO
http://www.santronics.com
http://santronics.blogspot.com
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.