Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Apr 2011 13:04:24 -0400
From:      Gary Palmer <gpalmer@freebsd.org>
To:        Paul Blazejowski <paulb@blazebox.homeip.net>, Robert Simmons <rsimmons0@gmail.com>, freebsd-security <freebsd-security@freebsd.org>
Subject:   Re: bad email address
Message-ID:  <20110421170424.GC73035@in-addr.com>
In-Reply-To: <20110421123447.GD4543@straylight.ringlet.net>
References:  <BANLkTi=MhGVSBhb52PCop%2Bo-75iT3FA6oA@mail.gmail.com> <20110420212354.GB73035@in-addr.com> <20110421042639.GB91477@DataIX.net> <BANLkTi=vAK9LU=PQ0gULuPu4rQ7eRXL1bw@mail.gmail.com> <1303360894.3063.1.camel@blaze.homeip.net> <20110421123447.GD4543@straylight.ringlet.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Apr 21, 2011 at 03:34:47PM +0300, Peter Pentchev wrote:
> On Thu, Apr 21, 2011 at 12:41:34AM -0400, Paul Blazejowski wrote:
> > doesn't mailman unsubscribe an email automatically after a couple of
> > bounces? unless freebsd list is not configured to do so...
> 
> That's only if the bounce message reaches mailman.  In this case,
> the culprit is a mail bouncing agent (MBA? ;) which addresses
> the bounce to the original sender (the one from the From header)
> instead of *any* of the other possible addresses present in
> mailman-generated messages that would do the right thing.

RFCs say bounces have to go to the envelope sender.  MailMan correctly
changes the envelope sender of mail to freebsd-security to
owner-freebsd-security@freebsd.org so that it can see the NDRs (non-delivery
reports).  However some broken software boucnes to the From address in
the header.  Since the From address in the header is *not* MailMan it cannot
auto-unsubscribe the bouncing user.

If the bouncing users MTA/MUA doesn't follow specifications there isn't
a lot MailMan can do

Anyway, back to your scheduled discussion of FreeBSD security issues

Gary



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20110421170424.GC73035>