OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Wietse Venema (wietseporcupine.org)
Date: Thu Jan 04 2001 - 08:22:49 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Jerome Santini:
    [ Charset ISO-8859-1 unsupported, converting... ]
    > Hello
    >
    > It seems that postfix (I'm using the postfix-19991231-pl13 version) refuse
    > to deliver mail to adresses beginning with a dash :
    >
    > Jan 4 08:20:10 bison postfix/qmgr[414]: 0932F156C3:
    > to=<-xxx.xxxwanadoo.fr>, relay=none, delay=4, status=bounced (invalid
    > recipient syntax: "-xxx.xxxwanadoo.fr")
    >
    > Re-reading the RFC 822, I didn't see anything describing this adress as
    > invalid.
    >
    > Do you think this should be described as a bug of postfix, or of wanadoo ?

    This is documented.

    On UNIX systems, allowing mail addresses to start with - is a
    security problem waiting to happen.

    Right now, Postfix allows no - at the start of any email address.
    Setting allow_min_user=yes allows them globally.

    In a future version, that switch may be made more configurable,
    for example, disallow -userdomain for delivery to external commands
    where they can do serious harm, but allow it for delivery via SMTP
    where it is no longer my problem.

            Wietse