OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [AMaViS-user] $final_bad_header_destiny = D_BOUNCE still delivered !?!

From: Jan Houtsma (listhoutsma.net)
Date: Thu Feb 01 2007 - 05:36:26 CST


Jan Houtsma wrote:
> Hi,
>
> I have the following config (postfix + amavisd-new-2.4.4-2.fc6):
>
> $QUARANTINEDIR = "$MYHOME/quarantine";
> $final_bad_header_destiny = D_BOUNCE;
> # $bad_header_quarantine_to # commented out thus using the default
> ('bad-header-quarantine')
>
> All other badh related amavisd parameters are pretty much default (not
> specified, thus using the values as specified in amavisd.conf-default).
>
> Now i got a bad header message but it's Passed (see below)??? How come?
> I would expect it to be Blocked?
>
> /var/log/maillog:
> Jan 31 17:25:49 pegasus amavis[31972]: (31972-11) Passed BAD-HEADER,
> [168.100.1.3] [65.83.58.34] <owner-postfix-userspostfix.org> ->
> <*********.net>, quarantine: badh-FphkxkIvoIqg, Message-ID:
> <20070131162452.3E83C797851mgate2.vbhcs.org>, mail_id: FphkxkIvoIqg,
> Hits: -5.599, queued_as: C696EF40FB, 7913 ms
>
> (b.t.w. own address replaced by *)
>
> After that the message is put in quarantine but it is also delivered to
> procmail and received by the recipient. I wouldn't expect this message
> to be delivered? Only when it would have been D_PASS. But it is D_BOUNCE.
>
> Any ideas?
>
> Thanks,
>
>

(Have included postfix-users because i wish to know how i can test the
above myself i.s.o. waiting for such message to arrive)

Can i inject a mail somewhere in my server with a certain bad header
format? If so how? And what do i need to malform to trigger it?

Thanks, Jan