-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, 15 Jan 2014, Axel Luttgens wrote:
I'll try with 2.2.10 as soon as possible.
I anyway had to compile 2.2.10. ;-)
No more dubious header removal.
But but but...
Tried again, but now without a leading space at the beginning of the
"boundary=" line, i.e. with:
Content-Type: multipart/alternative;
boundary=20cf302234d5b8063c04efcd4318
I received this one into my mailbox:
[...]
Content-Type: multipart/alternative;
Message-Id: <20140115150454.5A9E28FA2D3@ALMba.local>
Content-Length: 357
boundary=20cf302234d5b8063c04efcd4318
Subject: sieve test 6
--20cf302234d5b8063c04efcd4318
Content-Type: text/plain; charset=ISO-8859-1
instead of:
[...]
Content-Type: multipart/alternative;
boundary=20cf302234d5b8063c04efcd4318
Subject: sieve test 5
Message-Id: <20140115144803.1C9FB8FA17A@ALMba.local>
--20cf302234d5b8063c04efcd4318
Content-Type: text/plain; charset=ISO-8859-1
[...]
So, is could well be that you really are receiving messages without the line-continuation
character (the leading white space before "boundary=").
On the other hand, I guess the dovecot/pigeonhole behavior isn't the most
appropriate one when facing such a malformed message...
Well, you recieve the message text:
keyword: body
keyword: body
nokeyword
keyword: body
<<empty line>>
message body
The line "nokeyword" violates RFC. I wonder why your MTA delivers the
message at all.
Pigeonhole stops parsing headers at nokeyword, OK. One could probably
ignore that broken line instead, but if for some reason the empty line got
screwed, one would parse stuff nobody knows where it's from. But if
Pigeonhole would believe nokeyword is a continueation of the previous line
and unfold it, you open for attacks, IMHO.
The message without the leading space in the cont line should look as
"raw"/malformed in any mail client. I think Dovecot/Pigeonhole is correct
to stop parsing headers after seeing a malformed header line.
- --
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEVAwUBUtbFJnD1/YhP6VMHAQKZHggA19M+CJR8p2OeAt16a6XhxmMNrnNT//MD
iukjdeRBFBUIR3MNlSVPP0K3L5fRgdc6tUpfnAMTb6i4pbFRCR7jHHp6xpWDyCic
2M3z2xUuo/AAYDWJiWfs7WUADWDAswvXkEtY714JN63e1Pi4374uI1MxJWCZI5xO
2gsEXrkudBwRhGAlG+3q3cXYqu7AzzZq4ZIKM3L9r/BS0Nlv9uCznibHZMhu9uUI
C7rq2Gs3fNo5p95RZ30OdFRKRTn85AzBP7jKR5jW2ugN7ILxZYQC8WmQZ7nxEW6H
ShR/QigU0pcrLiLC+S/3ZO1R0aSqbC2DNV9VyVGmvLVrC/tD/SnX4Q==
=gmoU
-----END PGP SIGNATURE-----
