Re: SPF vulnerability

karan pott <[email protected]> Fri, 3 Apr 2009 13:23:54 +0530 (IST)
Newsgroups gmane.mail.spam.spf.devel
Message-ID <[email protected]>
--0-719346232-1238745234=:55366
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Thanks Scott,

Okay. I got it. Porting needs to be done for Windows. In case I like to off=
er my effort for this, can you please let me know what process do I have to=
 follow for my code to be included into libspf2?

Thanks and Regards,
Karunakar






________________________________
From: Scott Kitterman <[email protected]>
To: [email protected]
Sent: Friday, 20 March, 2009 5:44:14 PM
Subject: Re: [spf-devel] SPF vulnerability

On Fri, 20 Mar 2009 14:12:46 +0530 (IST) karan pott <[email protected]=
o.in> wrote:
> Hi,
>=20
> We were using libspf2 (1.0.2) in our product for anti-spam
> functionality on windows platform. Now, we want to upgrade to the
> latest version (1.2.9) to get the fixes for the vulnerabilities
> uncovered recently. For this, we are trying to compile the latest
> version for windows , but we see a lot of errors - some data types
> used in spf_dns_windns.c seem to be missing.
>=20
>Is there any workaround for this to proceed further?
>

I know that 1.2 is not fully backward compatible with 1.0 and one should ex=
pect to have to do some porting work.  I 'm not sure if that's related.=20=
=20

Additionally, none of the developers are Windows users, so it wouldn't supr=
ise me to find that was less well tested and had some things that needed fi=
xing.

Scott K


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1007/=3Dnow
RSS Feed: https://www.listbox.com/member/archive/rss/1007/
Powered by Listbox: http://www.listbox.com



      Add more friends to your messenger and enjoy! Go to http://messenger.=
yahoo.com/invite/


-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Modify Your Subscription: http://www.listbox.com/member/
Archives: https://www.listbox.com/member/archive/1007/=3Dnow
RSS Feed: https://www.listbox.com/member/archive/rss/1007/
Powered by Listbox: http://www.listbox.com

--0-719346232-1238745234=:55366
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><style type=3D"text/css"><!-- DIV {margin:0px;} --></style></he=
ad><body><div style=3D"font-family:times new roman,new york,times,serif;fon=
t-size:12pt"><div>Thanks Scott,<br><br>Okay. I got it. Porting needs to be =
done for Windows. In case I like to offer my effort for this, can you pleas=
e let me know what process do I have to follow for my code to be included i=
nto libspf2?<br><br>Thanks and Regards,<br>Karunakar<br><br><br></div><div =
style=3D"font-family: times new roman,new york,times,serif; font-size: 12pt=
;"><br><div style=3D"font-family: arial,helvetica,sans-serif; font-size: 13=
px;"><font size=3D"2" face=3D"Tahoma"><hr size=3D"1"><b><span style=3D"font=
-weight: bold;">From:</span></b> Scott Kitterman &lt;[email protected]&gt=
;<br><b><span style=3D"font-weight: bold;">To:</span></b> [email protected]=
box.com<br><b><span style=3D"font-weight: bold;">Sent:</span></b> Friday, 2=
0 March, 2009 5:44:14 PM<br><b><span style=3D"font-weight: bold;">Subject:<=
/span></b> Re:
 [spf-devel] SPF vulnerability<br></font><br>On Fri, 20 Mar 2009 14:12:46 +=
0530 (IST) karan pott &lt;<a ymailto=3D"mailto:[email protected]" =
href=3D"mailto:[email protected]">[email protected]</a>&g=
t; wrote:<br>&gt;&nbsp;Hi,<br>&gt;&nbsp;<br>&gt;&nbsp;We were using libspf2=
 (1.0.2) in our product for anti-spam<br>&gt;&nbsp;functionality on windows=
 platform. Now, we want to upgrade to the<br>&gt;&nbsp;latest version (1.2.=
9) to get the fixes for the vulnerabilities<br>&gt;&nbsp;uncovered recently=
. For this, we are trying to compile the latest<br>&gt;&nbsp;version for wi=
ndows , but we see a lot of errors - some data types<br>&gt;&nbsp;used in s=
pf_dns_windns.c seem to be missing.<br>&gt;&nbsp;<br>&gt;Is there any worka=
round for this to proceed further?<br>&gt;<br><br>I know that 1.2 is not fu=
lly backward compatible with 1.0 and one should expect to have to do some p=
orting work.&nbsp; I 'm not sure if that's related.&nbsp;
 <br><br>Additionally, none of the developers are Windows users, so it woul=
dn't suprise me to find that was less well tested and had some things that =
needed fixing.<br><br>Scott K<br><br><br>----------------------------------=
---------<br>Sender Policy Framework: <a href=3D"http://www.openspf.org" ta=
rget=3D"_blank">http://www.openspf.org</a><br>Modify Your Subscription: <a =
href=3D"http://www.listbox.com/member/" target=3D"_blank">http://www.listbo=
x.com/member/</a><br>Archives: <a href=3D"https://www.listbox.com/member/ar=
chive/1007/=3Dnow" target=3D"_blank">https://www.listbox.com/member/archive=
/1007/=3Dnow</a><br>RSS Feed: <a href=3D"https://www.listbox.com/member/arc=
hive/rss/1007/" target=3D"_blank">https://www.listbox.com/member/archive/rs=
s/1007/</a><br>Powered by Listbox: <a href=3D"http://www.listbox.com" targe=
t=3D"_blank">http://www.listbox.com</a><br></div></div></div><br>
      <!--6--><hr size=3D1></hr> Add more friends to your messenger and enj=
oy! <a href=3D"http://in.rd.yahoo.com/tagline_messenger_6/*http://messenger=
.yahoo.com/invite/"> Invite them now.</a><div style=3D"padding:0 4px 4px 4p=
x;background-color:#fff;clear:both" bgcolor=3D"#ffffff">
<hr>
<p>Sender Policy Framework: <a href=3D"http://www.openspf.org">http://www.o=
penspf.org</a><br>=0D
Modify Your Subscription: <a href=3D"http://www.listbox.com/member/">http:/=
/www.listbox.com/member/</a></p>
<table border=3D"0" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" styl=
e=3D"background-color:#fff" bgcolor=3D"#ffffff">
  <tr>
    <td padding=3D"4px">
      <font color=3D"black" size=3D"1" face=3D"helvetica, sans-serif;">
      <a style=3D"text-decoration:none;color:#669933;border-bottom: 1px sol=
id #444444"
href=3D"https://www.listbox.com/member/archive/1007/=3Dnow" title=3D"Go to =
archives for spf-devel">Archives</a>
<a border=3D"0" style=3D"text-decoration:none;color:#669933" href=3D"https:=
//www.listbox.com/member/archive/rss/1007/" title=3D"RSS feed for spf-devel=
"><img border=3D0 src=3D"https://www.listbox.com/images/feed-icon-10x10.jpg=
"></a>
<td valign=3D"top" align=3D"right"><a style=3D"border-bottom:none;" href=3D=
"http://www.listbox.com">
<img src=3D"https://www.listbox.com/images/listbox-logo-small.jpg"
title=3D"Powered by Listbox" border=3D"0" /></a></td>

      </font>
    </td>
  </tr>
</table>
</div>
</body></html>=

--0-719346232-1238745234=:55366--