Re: mailbot -A 'From' and "Messages with multiple addresses in From:"

Sam Varshavchik <[email protected]> Wed, 27 Dec 2017 06:55:35 -0500
Newsgroups gmane.mail.maildrop
Message-ID <[email protected]>
Tommaso Massimi writes:

> If I remove the -A "From:" field from mailbot, gmail accepts the email but  
> the "From" field is not filled how I'd like to have. Is there any way to  
> remove the original "From:" field, or can I add a filter to the mailbot  
> output?

-T forward should not be including the original message's From: header, only  
the one given by the -A option should be included in the autoresponse.

> this is how I'm calling mailbot:
>
>
> cc "| mailbot -t $RESPOND   -T forward \
>                    -A 'To: $5'  -A 'From: $USERNAME'  -s 'Auto Response: from  
> $USERNAME'  \

And what exactly is USERNAME at this point? It is not one of the variables  
that's set by maildrop. Have you actually looked at the formatted message,  
and verified that it has two distinct From: headers, instead of one with  
multiple addresses? It's likely that your USERNAME contains something that  
looks like multiple E-mail addresses.

Furthermore, hopefully, that $5 is sanitized for shell quotes and meta  
characters, at this point. If it's not, and it gets set to something from  
the original message, then hopefully it's not possible for someone to send  
you a specially crafted message that results in $5 getting manipulated to  
contain

'; rm -rf $HOME;

which would result in lots of fun, and hillarity.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Courier-maildrop mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/courier-maildrop
signature.asc (application/pgp-signature, 801 B)
-----BEGIN PGP SIGNATURE-----
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=ifzV
-----END PGP SIGNATURE-----