A BUGNOTE has been added to this bug.
======================================================================
http://www.dbmail.org/mantis/bug_view_advanced_page.php?bug_id=0000239
======================================================================
Reported By:                idk
Assigned To:                
======================================================================
Project:                    DBMail
Bug ID:                     239
Category:                   LMTP daemon
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     new
======================================================================
Date Submitted:             05-Aug-05 00:28 CEST
Last Modified:              05-Aug-05 02:36 CEST
======================================================================
Summary:                    lmtp will reject valid recipient when sender 
contains |
Description: 
LMTP returns error message 550 No address found for valid local recipient
when sender's email contains pipe character "|", like
<test|[EMAIL PROTECTED]>.
======================================================================

----------------------------------------------------------------------
 aaron - 05-Aug-05 01:09 CEST 
----------------------------------------------------------------------
Same thing as bug 
http://www.dbmail.org/mantis/bug_view_advanced_page.php?bug_id=0000169: we're 
being a bit restrictive about validchars.
This should probably be changed, since nobody's made any arguments not to
do so.

----------------------------------------------------------------------
 aaron - 05-Aug-05 01:10 CEST 
----------------------------------------------------------------------
Also the same as bug 
http://www.dbmail.org/mantis/bug_view_advanced_page.php?bug_id=0000179.

----------------------------------------------------------------------
 idk - 05-Aug-05 02:36 CEST 
----------------------------------------------------------------------
Yes, I found validchars in lmtp.c, characters "|", "," and "?" are invalid
characters in range 
http://www.dbmail.org/mantis/bug_view_advanced_page.php?bug_id=0000032-http://www.dbmail.org/mantis/bug_view_advanced_page.php?bug_id=0000126.

But according to RFC 821, invalid char in local-part of sender/recipient
addresses is "," only (from list above) and some other ones unless they
are escaped by "\" or quoted by """ (so <some|[EMAIL PROTECTED]>,
<some\,[EMAIL PROTECTED]> and <"some address"@domain> are valid adresses,
whereas <[EMAIL PROTECTED]> is not valid address, because backslash
escaped ">", so ">" is part of domain name, so address is not ending by
required ">", however lmtp accepts this address as valid).

And chars "?" and "|" are allowed by RFC.

I understand "|" may be dangerous on recipient side (maybe interpreted as
a process pipe), but on sender side? This (MAIL FROM) is used for
Return-path header only, isn't it?

Bug History
Date Modified  Username       Field                    Change              
======================================================================
05-Aug-05 00:28idk            New Bug                                      
05-Aug-05 00:28idk            File Added: maillog                          
05-Aug-05 01:09aaron          Bugnote Added: 0000804                       
05-Aug-05 01:10aaron          Bugnote Added: 0000805                       
05-Aug-05 02:36idk            Bugnote Added: 0000806                       
======================================================================

Reply via email to