Mailinglist Archive: opensuse (958 mails)

< Previous Next >
Re: [opensuse] Mails from openSUSE conferences failing to spam
Dne čtvrtek 2. května 2019 17:44:08 CEST, Adam Majer napsal(a):
On 5/2/19 3:29 PM, Vojtěch Zeisek wrote:
Dne čtvrtek 2. května 2019 15:15:26 CEST, Adam Majer napsal(a):
See the issue,
https://github.com/rspamd/rspamd/issues/2836
It's been updated. The problem is with mime parsing. You can
also see that in the source code

Thank You for update, but it's closed and the developer still
claims the behavior as intentional...

Ok, I've read this again with and your email to the list. The problem
is that the mailing list is breaking messages.

Content-Type: multipart/signed; boundary="nextPart1571188.MKfvkhBvvt";
micalg="pgp-sha256"; protocol="application/pgp-signature"

rfc1521.txt part 7.2.1 - https://www.ietf.org/rfc/rfc1521.txt

"The encapsulation boundary following the last body part is a
distinguished delimiter that indicates that no further body parts will
follow. Such a delimiter is identical to the previous delimiters, with
the addition of two more hyphens at the end of the line"

" There appears to be room for additional information prior to the
first encapsulation boundary and following the final boundary. These
areas should generally be left blank, and implementations must ignore
anything that appears before the first boundary or after the last
one.
"

But, our mailing lists adds the footer,

--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse+owner@xxxxxxxxxxxx

which is against "recommendation" of the RFC. Thunderbird ignored these
parts anyway (they are not displayed), which is as per RFC. Maybe it's
not a good idea just append this stuff to random data coming through?
And rspamd maintainer is probably correct, that these areas can be used
to trick either the spam scanner or the recipient.

So, ML software seems broken. rspamd is not really at fault for
detecting bad message formats.

If so, is it possible to (easily) fix our ML software?

--
Vojtěch Zeisek

Komunita openSUSE GNU/Linuxu
Community of the openSUSE GNU/Linux

https://www.opensuse.org/
https://trapa.cz/
< Previous Next >