Re: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread R. Scott Perry

Is there a certain reason why there is no variable containing the single
recipient of the message?
Yes -- because there is no single recipient (unless there is only a single 
recipient, in which case %ALLRECIPS% will display that recipient).  :)

Is there no variable containing the SMTP-Recipient like Junkmails
XSENDER option?
The problem is that while there is always only a single sender, there are 
often multiple recipients.  So for the E-mail with a vulnerability sent to 
B and C, and there was a variable to produce a single recipient, would you 
want it to be B or C?  Therein lies the problem.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread Markus Gufler
 The problem is that while there is always only a single 
 sender, there are 
 often multiple recipients.  So for the E-mail with a 
 vulnerability sent to 
 B and C, and there was a variable to produce a single 
 recipient, would you 
 want it to be B or C?  Therein lies the problem.


From where JM gathers the X-RCPT-TO value?

Markus


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread R. Scott Perry

From where JM gathers the X-RCPT-TO value?
That is added by IMail, when the E-mail is being delivered.

At that point, IMail has the single E-mail with multiple recipients, and it 
goes through each recipient and stores a copy of the E-mail in 
their  mailbox.  Since it has access to the individual mailbox at that 
time, it is able to add the X-RCPT-TO: header.

   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread Markus Gufler

 That is added by IMail, when the E-mail is being delivered.
 At that point, IMail has the single E-mail with multiple 
 recipients, and it 
 goes through each recipient and stores a copy of the E-mail in 
 their  mailbox.  Since it has access to the individual 
 mailbox at that 
 time, it is able to add the X-RCPT-TO: header.

I understand.
Is there a way to add a new SKIPIFMULTIPLERECIPS criteria?
So we can send vulnerability warnings at least to single recipients.

I mean sending the warning back to the sender so that he can force
sending is not a good solution. 
A.) a lot of autogenerated mails have no valid sender adress
B.) replies to spam senders are not good
C.) only the recipient should decide if he want to recieve the message

Markus


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread R. Scott Perry

Is there a way to add a new SKIPIFMULTIPLERECIPS criteria?
So we can send vulnerability warnings at least to single recipients.
Perhaps, but:

I mean sending the warning back to the sender so that he can force
sending is not a good solution.
%ALLRECIPS% will only include the sender if the sender sent a copy to 
himself, through your mailserver.

If you are not running an open relay, that means that the %ALLRECIPS% 
notification would only go to the sender if the sender was a user of yours.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread Markus Gufler

 %ALLRECIPS% will only include the sender if the sender sent a copy to 
 himself, through your mailserver.
 
 If you are not running an open relay, that means that the %ALLRECIPS% 
 notification would only go to the sender if the sender was a 
 user of yours.

I intended to send the warning to %MAILFROM% ...


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread R. Scott Perry

 %ALLRECIPS% will only include the sender if the sender sent a copy to
 himself, through your mailserver.

 If you are not running an open relay, that means that the %ALLRECIPS%
 notification would only go to the sender if the sender was a
 user of yours.
I intended to send the warning to %MAILFROM% ...
Then that warning would go to the *sender* of the E-mail.

I'm guessing you would want the link to go to the recipient, rather than 
the sender (since the sender will obviously want the E-mail to go through 
if he intended for the vulnerability to be there).
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Allrecips ... Singlerecip?

2003-03-05 Thread Markus Gufler
 I'm guessing you would want the link to go to the recipient, 
 rather than 
 the sender (since the sender will obviously want the E-mail 
 to go through 
 if he intended for the vulnerability to be there).

Yes. Exactly what I've said 2 mails before.
(Probably my english is not good enough :-)

I've searched in the postmaster-message I recieve for every
vulnerability and have counted 5 mails with multiple recipients from
240.
So the SKIPIFMULTIPLERECIPS is not to important but it would be nice to
have it to be completely sure that nobody alse then the recipient can
requeue the message.

Markus


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.