From mouss:
> so you certainly use the default "quoting" option (postfix looks inside
> quotes, which is not rfc compliant but is what most people probably
> want). but then, postfix will remove the quotes (and thus the space)
> before talking to amavisd. this is where I don't see how you "realize
> the situation". or is your amavisd getting the adress from the From
> header? this would surprise me....

Thanks for your help on this thread. Indeed it is normally Postfix
that cleans such malformed addresses, so these never reach amavisd-new
on normal setups.

It is indeed a problem if this cleaning step is omitted by Postfix,
as currently amavisd-new keeps all addresses internally in non-quoted
form, so <"[EMAIL PROTECTED]"> is undistinguishable from 
<[EMAIL PROTECTED]>, which has the consequences as reported.
Changing the internal form to avoid losing information requires
a nontrivial modification to the code and is on a TO-DO list.

Luckily in a normal Postfix stup this is not a problem, unless
Postfix cleaning steps and sender verification steps are disabled.

I would recommend adding the following restrictions:

  reject_non_fqdn_sender
  reject_unknown_sender_domain

and also a global setting:
  strict_rfc821_envelopes = yes
which rejects sender addresses such as <""@yahoo.com> and <@yahoo.com>
straight away.

  Mark


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to