Your message dated Wed, 30 Dec 2015 13:23:38 +0000 with message-id <[email protected]> and subject line Bug#809342: Removed package(s) from unstable has caused the Debian Bug report #779253, regarding rmilter: Incorrect SPF Check For Null MailFrom to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 779253: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779253 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: rmilter Version: 1.6.1 Severity: normal Tags: upstream Dear Maintainer, If you look at src/spf.c you'll see the following code snippet: /* No domain part in envfrom field - do not make spf check */ if (domain_pos == NULL) { return 1; } This is not the correct behavior for the SPF protocol. If you look at RFC 7208 section 2.4 (the second paragraph), it says: [RFC5321] allows the reverse-path to be null (see Section 4.5.5 in [RFC5321]). In this case, there is no explicit sender mailbox, and such a message can be assumed to be a notification message from the mail system itself. When the reverse-path is null, this document defines the "MAIL FROM" identity to be the mailbox composed of the local-part "postmaster" and the "HELO" identity (which might or might not have been checked separately before). Rather than simply return in this case, rmilter should retrieve the remote host's HELO/EHLO identity and perform the check with postmaster@HELO. Note: Although RFC 7208 is fairly recent, the requirement was the same in its predecessor RFC 4408.
--- End Message ---
--- Begin Message ---Version: 1.6.3+rm Dear submitter, as the package rmilter has just been removed from the Debian archive unstable we hereby close the associated bug reports. We are sorry that we couldn't deal with your issue properly. For details on the removal, please see https://bugs.debian.org/809342 The version of this package that was in Debian prior to this removal can still be found using http://snapshot.debian.org/. This message was generated automatically; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]. Debian distribution maintenance software pp. Luca Falavigna (the ftpmaster behind the curtain)
--- End Message ---
