Re: Getmail and Maildrop tricked into delivering truncated emails

Sam Varshavchik <[email protected]> Thu, 14 Dec 2017 06:45:54 -0500

Newsgroups	gmane.mail.maildrop
Message-ID	<[email protected]>

Miroslav Rovis writes:

> This is the excerpt from my .mailfilter.log:
>
> Date: Wed Dec 13 11:34:34 2017
> From:
> Subj:
> File: /home/mr/Maildir                                                    
> (221)
>
> Date: Wed Dec 13 11:34:35 2017
> From:
> Subj:
> File: /home/mr/Maildir                                                    
> (228)
>
> (and all the 144 first msgs like that, the last 100 were fine)
>
> And any more info that might still be missing, unless I am prevented to do so
> by more attacks, I will gladly provide.
>
> What happened. How was Maldrop (and Getmail) tricked into accepting so badly
> truncated mail with no content, no subject, no sender, no from, and delete it
> on the server?

There's nothing to be tricked here. A file with a single blank line is a  
valid E-mail message. Unless you explicitly have a rule that rejects mail  
with empty subjects, and no from: header, the mail will be accepted.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Courier-maildrop mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/courier-maildrop

signature.asc (application/pgp-signature, 801 B)