https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7411

Jeremy Andrews <athenian...@epyrus.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |athenian...@epyrus.org

--- Comment #2 from Jeremy Andrews <athenian...@epyrus.org> ---
Umm... so yeah, as a result of this change, my e-mail client is marked as using
a forged Mozilla header. I develop an e-mail client called Epyrus, which is a
fork of Mozilla Thunderbird.

The UA that's being sent is:

Mozilla/5.0 (Windows NT 10.0; WOW64; rv:6.3) Goanna/20230916 Epyrus/2.1.0

Essentially, the engine it uses is a fork of Gecko, and the application is a
fork of Thunderbird. The reason I am getting targeted by this rule is because I
am not presenting my application as being Thunderbird. If I were to impersonate
Thunderbird more accurately, I would actually be able to get past this check.

The Mozilla/5.0 thing is a compatibility string, essentially. It lets everyone
know the user agent that sent the e-mail is compatible with Mozilla, it's not
actually saying that the e-mail is from Mozilla, or even from a
Mozilla-produced client.

If it's necessary, I can look into how to remove it, but it is going to cause
compatibility issues because things that check useragents will have no idea how
to process an e-mail from "Epyrus" without the Mozilla string to indicate what
it's compatible with.

Also, apologies if I was supposed to create a new bug, but the thing I wanted
to highlight was that this change was a regression from my perspective because
it makes forking Thunderbird without getting flagged as impersonating Mozilla a
lot harder.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to