Yes, this is a bug. Is Dan going to issue a qmail-1.04?
He was very prompt in issuing qmail-1.03 when a bug was discovered in
qmail-smtpd's handling of a null envelope recipient.
-russ
p.s. Apologies to mycroft. No, I didn't understand his description of
the problem he was trying to solve.
Pavel Kankovsky writes:
> On 8 Aug 2001, John R. Levine wrote:
>
> > Like I said:
> >
> > > It's true, qmail doesn't work the way you might first have guessed it
> > > does. That doesn't mean it's wrong.
>
> The fact qmail--or any other piece of software--does something does not
> mean it is correct.
>
> Executive summary: qmail breaks VERP under certain circumstances.
>
> Let H be a host running qmail, A and B users at H, and V a virtual domain
> redirected to B@H. Let X@V, i.e. B-X@H, be forwarded to some other, maybe
> remote, address, say K@L. Now, let's assume A uses
>
> QMAILINJECT=r qmail-inject X@V
>
> to send a "VERPed" message M to X@V. M is forwarded to K@L. Now, let's
> assume the delivery to K@L fails and the message is bounced back to A.
> Well, it should be bounced to A-X=V@H, shouldn't it? After all, A sent the
> message to X@V, and VERP is supposed to preserve the *original* recipient
> address. Indeed, qmail-inject's manpage says:
>
> > r Use a per-recipient VERP. qmail-inject will append each
> > recipient address to the envelope sender of the copy going
> > to that recipient.
>
> Unfortunately, the return address in the scenario described above is
>
> A-B-X=V@H
>
> Is A supposed to know "B-" is superflous (if and only if the domain is V!)
> and should be removed? Is A supposed to analyze qmail's configurations
> files in order to fix something that should have never been broken? (BTW:
> I cannot find any code analyzing virtualdomains in ezmlm. Am I blind?)
>
> A does not care what is recorded in Delivered-To or what a program run
> from ~B/.qmail-V-... sees in its environment. A cares what qmail does when
> he sends a message and asks qmail to use VERP.
>
> Is this scenario purely artifical? Not at all. It is easy to imagine a
> host run by some ISP-like company hosting both an email forwarding service
> implemented as a virtual domain and some mailing lists.
>
> P.S. I wonder whether we will see any reaction from DJB himself.
>
> --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ]
> "Resistance is futile. Open your source code and prepare for assimilation."
--
-russ nelson <[EMAIL PROTECTED]> http://russnelson.com
Crynwr sells support for free software | PGPok |
521 Pleasant Valley Rd. | +1 315 268 1925 voice | All extremists should
Potsdam, NY 13676-3213 | +1 315 268 9201 FAX | be shot.
