At Wed, 1 Sep 2004 13:53:53 -0400, Jeff Potter wrote: > > > > In the absence of any response to my recent email (quoted at the bottom > > of this message), I am hereby proposing a patch to the latest version > > of > > Courier which will solve the problem of us not being able to tell which > > Received-SPF headers were added by Courier's message processing, and > > which may have been sitting around in the message since before Courier > > got a hold of it. > > ... > > Thoughts? > > Why not just "X-" modify any already existing SPF-Received headers? > That is, if a message coming in already has SPF-Received, modify that > header to be X-SPF-Received, and then let your instance of courier slap > on the new set.
That would also work (note that this is one of the three possibilities that I mentioned in my earlier message). > Doing otherwise strikes me is leaving users open to receiving spoofed > SPF-Received headers. However, my proposed patch is another way, in addition to the X- suggestion, to completely solve the spoofed headers problem. Sam guarantees that the Courier-inserted Received-SPF headers will always appear ahead of any others that might have already been in the message (did you know that?). Therefore, putting an indication into the topmost Received header as to exactly how many Received-SPF that Courier writes is all that's needed in order to recognize only those Received-SPF headers that Courier has inserted. The reason I proposed the patch as I did is because I have already written another patch that deals with the topmost Received header, and I therefore have some familiarity with that part of the Courier code. Therefore, I know that I could write the patch quickly. It would probably take me a lot longer to dig through the code and figure out how to change the old Received-SPF headers to X-Received-SPF. But if people tend to prefer that X- method, I'll give it a shot ... as long as no one comes up with any drawbacks or "gotchas". -- Lloyd Zusman [EMAIL PROTECTED] God bless you. ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
