Mailinglist Archive: opensuse (958 mails)

< Previous Next >
Re: [opensuse] Mails from openSUSE conferences failing to spam
On 5/2/19 3:29 PM, Vojtěch Zeisek wrote:
Dne čtvrtek 2. května 2019 15:15:26 CEST, Adam Majer napsal(a):
See the issue,
https://github.com/rspamd/rspamd/issues/2836
It's been updated. The problem is with mime parsing. You can also
see that in the source code

Thank You for update, but it's closed and the developer still claims the
behavior as intentional...

Ok, I've read this again with and your email to the list. The problem is
that the mailing list is breaking messages.

Content-Type: multipart/signed; boundary="nextPart1571188.MKfvkhBvvt";
micalg="pgp-sha256"; protocol="application/pgp-signature"

rfc1521.txt part 7.2.1 - https://www.ietf.org/rfc/rfc1521.txt

"The encapsulation boundary following the last body part is a
distinguished delimiter that indicates that no further body parts will
follow. Such a delimiter is identical to the previous delimiters, with
the addition of two more hyphens at the end of the line"

" There appears to be room for additional information prior to the
first encapsulation boundary and following the final boundary. These
areas should generally be left blank, and implementations must ignore
anything that appears before the first boundary or after the last
one.
"

But, our mailing lists adds the footer,

--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse+owner@xxxxxxxxxxxx

which is against "recommendation" of the RFC. Thunderbird ignored these
parts anyway (they are not displayed), which is as per RFC. Maybe it's
not a good idea just append this stuff to random data coming through?
And rspamd maintainer is probably correct, that these areas can be used
to trick either the spam scanner or the recipient.

So, ML software seems broken. rspamd is not really at fault for
detecting bad message formats.

- Adam

--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse+owner@xxxxxxxxxxxx

< Previous Next >