LDA input validation

Steffen Kaiser skdovecot at smail.inf.fh-brs.de
Mon Jan 26 07:52:14 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 25 Jan 2015, Joseph Tam wrote:
> St?phane Cottin writes:
>
>> dspam already send errors to syslog, the point here is to never loose
>> email contents.  This was a wrong design, i'm now use a wrapper instead
>> ( see my previous post for details ).
>
> You're stilling going to lose contents.  If dspam fails, the mail
> is dumped, the LDA returns exit code 75, and the MTA will probably
> issue a bounce Email to the sender.

which would be OK, if "never loose email contents" means "no message is 
discarded silently".

> If you really don't want the recipient to lose Email, you should
> buffer the input into a file, run dspam on it, and if the output
> is not-null, pipe it to dovecot-lda, otherwise pipe the original
> input.

(Y)

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBVMXyLnz1H7kL/d9rAQJMfgf8ChF+8YSwDbGHribJO7fyOkrXVL81aiMG
PXQr3NYEpz4WF1sQT+4lWeTfh+5FJ2HuNXLd2erN8KY3rdcwnxPrYdiZDia02JUx
tA3QTMlmgOmPGc9rFqqob5TxuCzgYd+98dn4EokkNBUOK6J60J9uHmNKGkaZRXEd
KD49FEJ8MYx7O+NryspJkr7jZELxp8L0wrLHUSZ/QQkqJRj6CqLKDP+InpdcIKqI
Sp6sUF6BngFSS3x9+1xygjDOFWfc7KgmNu4gs+hsdPio+skY16QX8jhcKVCsYn/m
2Jv2wNB9vREe+2uDDc345Ssi5wnorhnn+fCrVKx7cDgziCRADDjPQA==
=RGxT
-----END PGP SIGNATURE-----


More information about the dovecot mailing list