aus...@computershop.ca (Austin Hook), 2021.01.30 (Sat) 10:52 (CET): > Marcus: > > > Regarding procmail beware of this: > > https://marc.info/?l=openbsd-ports&m=151256201621939 > > Fascinating. Never caught that discussion before. I gather a specially > crafted message could get control of the user's account, or at least it > would hard to prove that it couldn't. > > I guess I can appreciate further, that since the mail system processes the > .forward file, that means a task with higher privileges than even the > user, has to deal with external world possibly garbage or infected input, > which could be unfriendly, and if the code base was designed without even > such a thought, and is unwieldy -- there was the incentive to do better. > > Oh, but the years of fine tuning the procmail scripts....
oh yeah! and it gets even worse... sooner or later we might have to switch to sieve[1] scripts. because that is what dovecot and everything else understands. but it's standardized, as a plus. [1] https://en.wikipedia.org/wiki/Sieve_(mail_filtering_language) > > formail is not in the ports tree, afaict. > I probably just should have said only the package for procmail; formail > comes with it. I should have used pkg_locate(1) first... > formail goes into the .forward file, and regularizes any > problems with the "From" email address, before handing off to procmail. > I guess that's somewhat a security enhancement. Perhaps not enough. > > Maybe formail isn't always used or was dropped in later version. I see a > comment from Steve (clipped below) that he doesn't use it. [Haven't yet > checked out his reference or absorbed it's implications yet. May comment > further, if I further retry procmail first, before learning fdm.] > > > I use ~/Maildir > > In your case, is that ~/Maildir (a file), or is it ~/Maildir/ a directory? It is a directory, and a different way to store mail. see https://en.wikipedia.org/wiki/Maildir > In my new install, not doing any mail sorting yet, Simple "Mail" seems to > put new mail into ~/mbox (the file) if not handled explicitly other than > looking at the subject lines -- even though it says (at run time) > something about putting it back into the user's mailbox -- which is > different wording from the documentation, and slightly confusing. ha-ha, the second time within a couple of days that mail(1) interactive use confuses people, including me :-) > Alpine (not further configured) moves all new mail from /var/mail/*user*/ > to ~/mbox (the file), soon as it is invoked. my gut feeling is that this historic behaviour is going extinct. Marcus > On Wed, 27 Jan 2021, Maurice McCarthy wrote: > > > Most use fdm from ports > > Best > > On Wed, 27 Jan 2021, Marcus MERIGHI wrote: > > > aus...@computershop.ca (Austin Hook), 2021.01.26 (Tue) 18:43 (CET): > > > Wonder if anyone is still using Procmail/Formail under 6.8 for > > > presorting incoming mail before it hits one's main inbox. > > > > Regarding procmail beware of this: > > https://marc.info/?l=openbsd-ports&m=151256201621939 > > > > formail is not in the ports tree, afaict. > > > > I switched from procmail to fdm: > > ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ > > Information for inst:fdm-2.0p0 > > > > Comment: > > fetch, filter and deliver mail > > > > Description: > > fdm is a simple, lightweight replacement for mail fetch, filter and > > delivery programs such as fetchmail and procmail. It can fetch using > > POP3 or IMAP (with SSL) or from stdin, and deliver to a pipe, file, > > maildir, mbox or SMTP server, based on regexps. > > > > Maintainer: Nicholas Marriott <n...@openbsd.org> > > ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ > > > > > Also wondering if folks send the remainimg mail, after filtering, to > > > /var/mail/*user*, or to ~/mbox or to ~mail/mbox. Any advantage to be > > > had, > > > or any mere consensus, regardless of advantages? > > > > I use ~/Maildir > > > > Marcus > > > Date: Wed, 27 Jan 2021 09:04:43 -0700 > From: Steve Williams <st...@williamsitconsulting.com> > To: misc@openbsd.org > Subject: Re: 6.8 and Procmail/Formail: anyone still using them? > > Hi, > > I am using procmail under 6.8 successfully.? I did have problems with it > when upgrading to (I think) 6.4. > > If you look for the mail list archives for "OpenBSD 6.4 smtpd local mail > delivery missing "From " when .forward (procmail)" > > My .procmailrc: > > "|/usr/local/bin/procmail -f -" > > Not sure if this is your problem or not.? But I have quite a large > .procmailrc file (200 lines) that makes? a historical archive of every > incoming email, filtering maillist emails, etc. > > Thanks, > Steve W. > >
