Re: [exim] Spam using a space to separate message body and h…

Páxina inicial
Borrar esta mensaxe
Responder a esta mensaxe
Autor: Eric Bullen
Data:  
Para: exim-users
Asunto: Re: [exim] Spam using a space to separate message body and header...
On 9/2/05, Eric Bullen <barnabus.pinklehorn@???> wrote:
>
> On 9/2/05, Philip Hazel <ph10@???> wrote:
> >
> > On Thu, 1 Sep 2005, Eric Bullen wrote:
> >
> > > It could be GMail that is removing that space- when i sent it out, I
> > *made
> > > sure* that the space was there. In this case, take my word for it, and
> > know
> > > that exim (like Heiko said) should check for invalid header lines to
> > catch
> > > things like this... Does anyone have any suggestions on how to 'fix'
> > this?
> > > Should Exim catch these errors?
> >
> > Exim reads header lines until either (a) it reaches an entirely empty
> > line (CRLF followed by CRLF) or (b) until it reaches a line that does
> > not take the form of a header line (that is, it doesn't start "name:")
> > or the continuation of a previous header line (a line starting with
> > white space). If Exim finds the sequence
> >
> > something:_xxxxxxxx
> > _
> > other_stuff
> >
> > where I have used an underscore to represent spaces, it will treat the
> > second line as a continuation of the first header line. However, the
> > third line can't be a header line, so it will be taken as the first line
> >
> > of the body.
> >
> > This is the same rule that other MTAs follow, I believe. (It is what
> > Smail used to do when we were running it in the days before I wrote
> > Exim.)
>
>
>
> I suspected the same thing. I will wait for another email to come in, and
> show the before->after email to show how Exim is handling it. Looking at the
> whole email, every line in the message body began with a space, so it
> *looked* like a continuance of the previous line (seemed that Exim ignored
> the empty line- as it had a space in it). I'll provide more details when
> another one arrives.
>


Attached is a email I just received that shows the problem I was speaking
of. At the end of the email- Exim added a "X-FromHost:" header line to the
message. I am running Exim 4.52.

The MD5 of the attachment is: b4fe082a6ba2d756a1205662bcda2a86

Thanks for everyone's help in this.

-Eric
From politicalsurvey@??? Fri Sep 02 17:10:56 2005
Received: from jug.sprintersrungroup.com ([65.175.66.12]:50607)
    by alnitak.blah.com with esmtp id 1EBLcV-0001BW-QW
    for ericb@???; Fri, 02 Sep 2005 17:10:56 -0700
From: "Political Science Survey" <politicalsurvey@???>
Reply-To: "Political Science Survey" <politicalsurvey @sprintersrungroup.com>
To: ericb@???
Subject: Do You Support the War in Iraq?
Message-Id: <580.136905005540@???>
Date: Fri, 02 Sep 2005 19:11:01 -0500
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit


Do you support the war in Iraq?
Click Here: http://jug.sprintersrungroup.com/clk/236043113.28.6753.102

Take our Nationwide Political Survey today!

Share your opinion and participate in our offers to receive a $500 Gift Card or laptop computer!
Click Here: http://jug.sprintersrungroup.com/clk/236043113.28.6753.102





*Your choice will not be associated with your name and only anonymously used for polling results. NationalIssuePanel Gift Program is not endorsed, sponsored by or affiliated with any organization for or against the war; we do not advocate or endorse any stance.

*This promotion is conducted exclusively by National Issue Panel and is subject to participation terms and conditions. Receipt of your item requires compliance with offer terms, including: age and residency requirements; registration with valid email address, shipping address and contact phone number; completion of user survey and sponsor promotions. Upon valid completion of all requirements, we will ship your item to your provided shipping address. Unless otherwise indicated, participation eligibility is restricted to US residents, 18 and over. Void where prohibited. If you no longer wish to receive National Issue Panel emails, visit the unsubscribe page on the National Issue Panel site or visit the url: http://jug.sprintersrungroup.com/clk/236043113.28.6753.101 Or, print a copy of this email and send it along with your request to: National Issue Panel, 6542 Hypoluxo Rd. #293, Lake Worth, FL 33467.





http://jug.sprintersrungroup.com/uns/236043113.28.6753 -4484819147
X-FromHost: jug.sprintersrungroup.com [65.175.66.12]:50607