Gerrit Pape <[EMAIL PROTECTED]> writes:

> Good idea, I'll do so.

Can you let us know the address once you do this?  I'd like to play
with it a bit.

> The good thing is that if my program fails to identify a
> confirmation request, it doesn't hurt much, the request simply is
> delivered, and the user needs to confirm manually.

Good idea.

> This is my plan to identify and verify a TMDA delivery confirmation
> request after looking at the envelope and reading the headers:
>
> 1. check for the envelope sender address to be empty

Many TMDA users do not use an empty envelope sender address for the
reasons discussed in TMDA FAQ 4.7.  You might want to relax this one.

> 4. check for the existence of a X-Delivery-Agent: TMDA/* header field

In most cases this should be fine, but TMDA does allow the user to
remove this field, so it's possible that the confirmation request may
not contain it.

tmda-sendmail (for the MUA) also adds X-Delivery-Agent, so to reduce
confusion you might want to also check for the existence of an
`Auto-Submitted: auto-replied' field which only a confirmation request
will contain.

> If all the checks are successful, a message is sent to the address
> found in Reply-To: (or if absent From:), with a nice informative note,
> and the delivery confirmation request message included.

Some users do not include the confirmation address in Reply-To for
the reasons discussed in TMDA FAQ 1.13.  Further, sending to the
address in From will not work because it does not contain the
confirmation address.  If Reply-To is absent, you could fall back to
parsing the message body for the confirmation address, or just abort.

> This is somewhat more complicated than just checking the Message-ID
> and the original recipient, but should work in my opinion.

It should work for most TMDA users, with the caveats mentioned above.

Again, if you don't have a local TMDA installation to test with, feel
free to use [EMAIL PROTECTED]  Confirmed messages are just discarded.
_________________________________________________
tmda-workers mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-workers

Reply via email to