From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Tue Feb 12 2008 - 13:29:38 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tue, Feb 12, 2008 at 11:12:38AM -0800, Doug Sampson wrote:

> We want to include the recipient's email address in all of the "Undelivered
> Mail Returned to Sender" messages that are returned to our users by our
> postfix relay. These messages are seen in the user's Outlook application.
> Attached to each of these messages are a delivery report and the content of
> the originating email.
>
> Sample content of the "Undelivered Mail Returned to Sender" message:
>
> This is the Postfix program at host mailfilter.dawnsign.com. I'm sorry to
> have to inform you that your message could not be delivered to one or more
> recipients. It's attached below. For further assistance, please send mail to
> If you do so, please include this problem report. You can delete your own
> text from the attached returned message. The Postfix program : connect to
> csiunix.unh.edu[208.67.216.130]: Operation timed out
>

Some piece of garbage is interpreting email addresses of the form "<"
address ">" as HTML tags. Eliminate cross-site HTML injection attacks
from the (web?) mail system.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]