[exim-dev] [Bug 1684] Malformed headers which exceed length …

Top Page
Delete this message
Reply to this message
Author: admin
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 1684] Malformed headers which exceed length spec willingly passed to remote servers
https://bugs.exim.org/show_bug.cgi?id=1684

Git Commit <git@???> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |git@???


--- Comment #8 from Git Commit <git@???> ---
Git commit:
http://git.exim.org/exim.git/commitdiff/8c952127a4d1827ea14da68d94eb5ea8d6174a35

commit 8c952127a4d1827ea14da68d94eb5ea8d6174a35
Author:     Jeremy Harris <jgh146exb@???>
AuthorDate: Tue Oct 13 17:04:03 2015 +0100
Commit:     Jeremy Harris <jgh146exb@???>
CommitDate: Tue Oct 13 17:08:28 2015 +0100


    Check maximum (folded) line length in default spec file data ACL and smtp
transport.  Bug 1684
---
 src/src/configure.default | 9 +++++++++
 1 file changed, 9 insertions(+)


diff --git a/src/src/configure.default b/src/src/configure.default
index 3223bff..ec60700 100644
--- a/src/src/configure.default
+++ b/src/src/configure.default
@@ -492,6 +492,11 @@ acl_check_rcpt:

acl_check_data:

+  # Deny if the message contains an overlong line.  Per the standards
+  # we should never receive one such via SMTP.
+  #
+  deny    condition  = ${if > {$max_received_linelength}{998}}
+
   # Deny if the message contains a virus. Before enabling this check, you
   # must install a virus scanner and set the av_scanner option above.
   #
@@ -684,9 +689,13 @@ begin transports



# This transport is used for delivering messages over SMTP connections.
+# Refuse to send any messsage with over-long lines, which could have
+# been receved other than via SMTP. The use of message_size_limit to
+# enforce this is a red herring.

remote_smtp:
driver = smtp
+ message_size_limit = ${if > {$max_received_linelength}{998} {1}{0}}


# This transport is used for local delivery to user mailboxes in traditional

--
You are receiving this mail because:
You are on the CC list for the bug.