Re: SPF vulnerability
karan pott <[email protected]> Fri, 10 Apr 2009 12:04:13 +0530 (IST)
| Newsgroups | gmane.mail.spam.spf.devel |
|---|---|
| Message-ID | <[email protected]> |
--0-2106015111-1239345253=:78151 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Shevek, I have spent a bit of effort to make libspf2 1.2.9 to be compilable on Wind= ows with Visual Studio 2005. However, while testing I figured out that (lib= spf2-1.2.9\src\libspf2\spf_server.c : 350) had the statement which made SPF= _dns_lookup fail with DNSTIMEOUT rather that the return codes being checked= for. But when I modified the code to (rr_type =3D ns_t_txt), it started working = okay. I would like to confirm that, is there something missing from the ori= ginal code or my change is okay. Another important thing I like to know is that once I am done with my porti= ng effort, I would like to submit my code. Can you please guide how and wha= t the procedure is and How I can get my source code reviewed. Thanks and Regards, Karan. ________________________________ From: karan pott <[email protected]> To: [email protected] Sent: Friday, 3 April, 2009 1:23:54 PM Subject: Re: [spf-devel] SPF vulnerability Thanks Scott, Okay. I got it. Porting needs to be done for Windows. In case I like to off= er my effort for this, can you please let me know what process do I have to= follow for my code to be included into libspf2? Thanks and Regards, Karunakar ________________________________ From: Scott Kitterman <[email protected]> To: [email protected] Sent: Friday, 20 March, 2009 5:44:14 PM Subject: Re: [spf-devel] SPF vulnerability On Fri, 20 Mar 2009 14:12:46 +0530 (IST) karan pott <[email protected]= o.in> wrote: > Hi, >=20 > We were using libspf2 (1.0.2) in our product for anti-spam > functionality on windows platform. Now, we want to upgrade to the > latest version (1.2.9) to get the fixes for the vulnerabilities > uncovered recently. For this, we are trying to compile the latest > version for windows , but we see a lot of errors - some data types > used in spf_dns_windns.c seem to be missing. >=20 >Is there any workaround for this to proceed further? > I know that 1.2 is not fully backward compatible with 1.0 and one should ex= pect to have to do some porting work. I 'm not sure if that's related.=20= =20 Additionally, none of the developers are Windows users, so it wouldn't supr= ise me to find that was less well tested and had some things that needed fi= xing. Scott K ------------------------------------------- Sender Policy Framework: http://www.openspf.org Modify Your Subscription: http://www.listbox.com/member/ Archives: https://www.listbox.com/member/archive/1007/=3Dnow RSS Feed: https://www.listbox.com/member/archive/rss/1007/ Powered by Listbox: http://www.listbox.com ________________________________ Add more friends to your messenger and enjoy! Invite them now. ________________________________ =20 Sender Policy Framework: http://www.openspf.org Modify Your Subscription: http://www.listbox.com/member/ Archives=20=20=20=20 Check out the all-new Messenger 9.0! Go to http://in.messenger.yahoo.= com/ ------------------------------------------- Sender Policy Framework: http://www.openspf.org Modify Your Subscription: http://www.listbox.com/member/ Archives: https://www.listbox.com/member/archive/1007/=3Dnow RSS Feed: https://www.listbox.com/member/archive/rss/1007/ Powered by Listbox: http://www.listbox.com --0-2106015111-1239345253=:78151 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head><style type=3D"text/css"><!-- DIV {margin:0px;} --></style></he= ad><body><div style=3D"font-family:times new roman,new york,times,serif;fon= t-size:12pt"><div>Hi Shevek,<br><br>I have spent a bit of effort to make li= bspf2 1.2.9 to be compilable on Windows with Visual Studio 2005. However, w= hile testing I figured out that (libspf2-1.2.9\src\libspf2\spf_server.c : 3= 50) had the statement which made SPF_dns_lookup fail with DNSTIMEOUT rather= that the return codes being checked for.<br><br>But when I modified the co= de to (rr_type =3D ns_t_txt), it started working okay. I would like to conf= irm that, is there something missing from the original code or my change is= okay.<br><br>Another important thing I like to know is that once I am done= with my porting effort, I would like to submit my code. Can you please gui= de how and what the procedure is and How I can get my source code reviewed.= <br><br>Thanks and Regards,<br>Karan. <br></div><div style=3D"font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><div style=3D"= font-family: times new roman,new york,times,serif; font-size: 12pt;"><font = size=3D"2" face=3D"Tahoma"><hr size=3D"1"><b><span style=3D"font-weight: bo= ld;">From:</span></b> karan pott <[email protected]><br><b><= span style=3D"font-weight: bold;">To:</span></b> [email protected]<b= r><b><span style=3D"font-weight: bold;">Sent:</span></b> Friday, 3 April, 2= 009 1:23:54 PM<br><b><span style=3D"font-weight: bold;">Subject:</span></b>= Re: [spf-devel] SPF vulnerability<br></font><br><div style=3D"font-family:= times new roman,new york,times,serif; font-size: 12pt;"><div>Thanks Scott,= <br><br>Okay. I got it. Porting needs to be done for Windows. In case I lik= e to offer my effort for this, can you please let me know what process do I= have to follow for my code to be included into libspf2?<br><br>Thanks and = Regards,<br>Karunakar<br><br><br></div><div style=3D"font-family: times new= roman,new york,times,serif; font-size: 12pt;"><br><div style=3D"font-family: arial,h= elvetica,sans-serif; font-size: 13px;"><font size=3D"2" face=3D"Tahoma"><hr= size=3D"1"><b><span style=3D"font-weight: bold;">From:</span></b> Scott Ki= tterman <[email protected]><br><b><span style=3D"font-weight: bold;= ">To:</span></b> [email protected]<br><b><span style=3D"font-weight:= bold;">Sent:</span></b> Friday, 20 March, 2009 5:44:14 PM<br><b><span styl= e=3D"font-weight: bold;">Subject:</span></b> Re: [spf-devel] SPF vulnerability<br></font><br>On Fri, 20 Mar 2009 14:12:46 += 0530 (IST) karan pott <<a rel=3D"nofollow" ymailto=3D"mailto:open_mind_c= [email protected]" target=3D"_blank" href=3D"mailto:[email protected]= n">[email protected]</a>> wrote:<br>> Hi,<br>> = <br>> We were using libspf2 (1.0.2) in our product for anti-spam<br= >> functionality on windows platform. Now, we want to upgrade to th= e<br>> latest version (1.2.9) to get the fixes for the vulnerabilit= ies<br>> uncovered recently. For this, we are trying to compile the= latest<br>> version for windows , but we see a lot of errors - som= e data types<br>> used in spf_dns_windns.c seem to be missing.<br>&= gt; <br>>Is there any workaround for this to proceed further?<br>&g= t;<br><br>I know that 1.2 is not fully backward compatible with 1.0 and one= should expect to have to do some porting work. I 'm not sure if that's related. <br><br>Additionally, none of the developers are Windows users, so it woul= dn't suprise me to find that was less well tested and had some things that = needed fixing.<br><br>Scott K<br><br><br>----------------------------------= ---------<br>Sender Policy Framework: <a rel=3D"nofollow" target=3D"_blank"= href=3D"http://www.openspf.org">http://www.openspf.org</a><br>Modify Your = Subscription: <a rel=3D"nofollow" target=3D"_blank" href=3D"http://www.list= box.com/member/">http://www.listbox.com/member/</a><br>Archives: <a rel=3D"= nofollow" target=3D"_blank" href=3D"https://www.listbox.com/member/archive/= 1007/=3Dnow">https://www.listbox.com/member/archive/1007/=3Dnow</a><br>RSS = Feed: <a rel=3D"nofollow" target=3D"_blank" href=3D"https://www.listbox.com= /member/archive/rss/1007/">https://www.listbox.com/member/archive/rss/1007/= </a><br>Powered by Listbox: <a rel=3D"nofollow" target=3D"_blank" href=3D"h= ttp://www.listbox.com">http://www.listbox.com</a><br></div></div></div><br> <hr size=3D"1"> Add more friends to your messenger and enjoy! <a rel= =3D"nofollow" target=3D"_blank" href=3D"http://in.rd.yahoo.com/tagline_mess= enger_6/*http://messenger.yahoo.com/invite/"> Invite them now.</a><div styl= e=3D"padding: 0pt 4px 4px; background-color: rgb(255, 255, 255); clear: bot= h;"> <hr> <p>Sender Policy Framework: <a rel=3D"nofollow" target=3D"_blank" href=3D"h= ttp://www.openspf.org">http://www.openspf.org</a><br> Modify Your Subscription: <a rel=3D"nofollow" target=3D"_blank" href=3D"htt= p://www.listbox.com/member/">http://www.listbox.com/member/</a></p> <table style=3D"background-color: rgb(255, 255, 255);" width=3D"100%" bgcol= or=3D"#ffffff" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"> <tbody><tr> <td> <font size=3D"1" color=3D"black" face=3D"helvetica, sans-serif;"> <a rel=3D"nofollow" style=3D"border-bottom: 1px solid rgb(68, 68, 68)= ; text-decoration: none; color: rgb(102, 153, 51);" target=3D"_blank" href= =3D"https://www.listbox.com/member/archive/1007/=3Dnow" title=3D"Go to arch= ives for spf-devel">Archives</a> <a rel=3D"nofollow" style=3D"text-decoration: none; color: rgb(102, 153, 51= );" target=3D"_blank" href=3D"https://www.listbox.com/member/archive/rss/10= 07/" title=3D"RSS feed for spf-devel"><img src=3D"https://www.listbox.com/i= mages/feed-icon-10x10.jpg" border=3D"0"></a> </font></td><td valign=3D"top" align=3D"right"><a rel=3D"nofollow" style=3D= "border-bottom: medium none;" target=3D"_blank" href=3D"http://www.listbox.= com"> <img src=3D"https://www.listbox.com/images/listbox-logo-small.jpg" title=3D= "Powered by Listbox" border=3D"0"></a></td> =20=20=20=20=20=20 =20=20=20=20 </tr> </tbody></table> </div> </div></div></div><br> <!--6--><hr size=3D1></hr> Add more friends to your messenger and enj= oy! <a href=3D"http://in.rd.yahoo.com/tagline_messenger_6/*http://messenger= .yahoo.com/invite/"> Invite them now.</a><div style=3D"padding:0 4px 4px 4p= x;background-color:#fff;clear:both" bgcolor=3D"#ffffff"> <hr> <p>Sender Policy Framework: <a href=3D"http://www.openspf.org">http://www.o= penspf.org</a><br>=0D Modify Your Subscription: <a href=3D"http://www.listbox.com/member/">http:/= /www.listbox.com/member/</a></p> <table border=3D"0" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" styl= e=3D"background-color:#fff" bgcolor=3D"#ffffff"> <tr> <td padding=3D"4px"> <font color=3D"black" size=3D"1" face=3D"helvetica, sans-serif;"> <a style=3D"text-decoration:none;color:#669933;border-bottom: 1px sol= id #444444" href=3D"https://www.listbox.com/member/archive/1007/=3Dnow" title=3D"Go to = archives for spf-devel">Archives</a> <a border=3D"0" style=3D"text-decoration:none;color:#669933" href=3D"https:= //www.listbox.com/member/archive/rss/1007/" title=3D"RSS feed for spf-devel= "><img border=3D0 src=3D"https://www.listbox.com/images/feed-icon-10x10.jpg= "></a> <td valign=3D"top" align=3D"right"><a style=3D"border-bottom:none;" href=3D= "http://www.listbox.com"> <img src=3D"https://www.listbox.com/images/listbox-logo-small.jpg" title=3D"Powered by Listbox" border=3D"0" /></a></td> </font> </td> </tr> </table> </div> </body></html>= --0-2106015111-1239345253=:78151--