RE: Problems opening mail on this list
From: Andrew Berry > > Here is a message signed with Thunderbird 2 on Windows (ugh...). > > --Andrew Andrew, I received that with no problem. There is also a button in the corner I have never seen before that reveals the signature on this message is Valid and Trusted. In response to your earlier message, I do not have control over which mail agent I use. That is dictated by the company's IT group. It may soon be further downgraded to Office 2007, if the rumors I hear are correct. Bob McConnell ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
Oliver Fromme wrote: Paul Schmehl wrote: > [...] > By default, it appears that Mailman does not do content filtering. It also has > pass rules (if filtering is enabled) for multipart/mixed, multipart/alternative > and text/plain. So, it's possible that MIMEDefang is the culprit instead. It's documented in the FreeBSD Handbook: http://freebsd.org/handbook/eresources.html#ERESOURCES-MAILFILTERING Best regards Oliver Good find - it looks like Mail is using application/pkcs7-signature, while Thunderbird is using , application/x-pkcs7-signature, which is allowed. According to http://en.wikipedia.org/wiki/S/MIME#Caveats, either is an acceptable mime type. So I guess I should email the list admins and ask them to allow that mime type, since they are allowing signatures anyways on the list. --Andrew smime.p7s Description: S/MIME Cryptographic Signature
Re: Problems opening mail on this list
Paul Schmehl wrote: > [...] > By default, it appears that Mailman does not do content filtering. It also > has > pass rules (if filtering is enabled) for multipart/mixed, > multipart/alternative > and text/plain. So, it's possible that MIMEDefang is the culprit instead. It's documented in the FreeBSD Handbook: http://freebsd.org/handbook/eresources.html#ERESOURCES-MAILFILTERING Best regards Oliver -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M. Handelsregister: Registergericht Muenchen, HRA 74606, Geschäftsfuehrung: secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün- chen, HRB 125758, Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart FreeBSD-Dienstleistungen, -Produkte und mehr: http://www.secnetix.de/bsd Perl is worse than Python because people wanted it worse. -- Larry Wall ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
--On Wednesday, June 11, 2008 13:13:42 -0400 Andrew Berry <[EMAIL PROTECTED]> wrote: Here is a message signed with Thunderbird 2 on Windows (ugh...). And it came through fine. From: Andrew Berry <[EMAIL PROTECTED]> User-Agent: Thunderbird 2.0.0.0 (Windows/20070326) MIME-Version: 1.0 References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> In-Reply-To: <[EMAIL PROTECTED]> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="ms060103070502080704070506" -- Paul Schmehl As if it wasn't already obvious, my opinions are my own and not those of my employer. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
Here is a message signed with Thunderbird 2 on Windows (ugh...). --Andrew smime.p7s Description: S/MIME Cryptographic Signature
Re: Problems opening mail on this list
Ian Smith wrote: However, what normally happens to attachments to questions@, at least to digests, is that they get stripped with a note pointing to the original attachment, as this subsequent message from Chad illustrates: Which makes sense - attachments don't clog up the list, and people can download them if they want. What I think is happening is that the attachment is being stripped, and Outlook is looking for it since it can be inferred that it exists from the MIME type. Of course, the error should be that the message can't be authenticated (That's what Mail does, and it's just a line, not a modal dialog), and have nothing to do with the recipient needing a certificate. But I think it's more general, as a PGP signature (which is no different from any other attachment) also caused Bob the error. I wonder if *any* scrubbed attachment will cause a problem? I just had to set up another system as my macbook's network card has died, so I'll send a signed message with Thunderbird in a minute to see if it also causes the error. Bob, if it still causes an error, you should seriously look at changing to a mail client which won't cause you these problems, since you can't control what users on mailing lists send you :). --Andrew ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Problems opening mail on this list
Paul, The message you sent right after this one produced the same error in Outlook as Andrew's. Bob McConnell -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Schmehl Sent: Tuesday, June 10, 2008 6:35 PM To: freebsd-questions@freebsd.org Subject: Re: Problems opening mail on this list --On Tuesday, June 10, 2008 15:32:45 -0600 Chad Perrin <[EMAIL PROTECTED]> wrote: > On Tue, Jun 10, 2008 at 03:34:59PM -0500, Paul Schmehl wrote: >> --On Tuesday, June 10, 2008 16:23:32 -0400 Andrew Berry >> <[EMAIL PROTECTED]> wrote: >> >> > On 10-Jun-08, at 1:07 PM, Paul Schmehl wrote: >> > >> >> Andrew, maybe you could send a signed message, state in the body >> >> that it was signed, and then I can look at the headers and tell you >> >> what's going on. >> > >> > Here is a message which has been signed. >> > >> >> There's no sig attached, so it's getting stripped off somewhere. >> This line in the headers looks to be the culprit: >> X-Content-Filtered-By: Mailman/MimeDel 2.1.5 >> >> That will strip all attachments, including S/MIME. > > My PGP signatures seem to come through just fine, however. Yes it did. And it appears that this is the reason: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="H1spWtNR+x+ondvy" Content-Disposition: inline Andrew's is like this: Content-Type: multipart/signed; boundary=Apple-Mail-1-746495031; micalg=sha1; protocol="application/pkcs7-signature" Mime-Version: 1.0 (Apple Message framework v924) Date: Tue, 10 Jun 2008 16:23:32 -0400 References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> X-Mailer: Apple Mail (2.924) X-Spam-Scanner: SpamAssassin 3.04 (http://www.spamassassin.org/) on batman.cs.uoguelph.ca X-Spam-Score: hits=0.0 X-Spam-Level: X-Spam-Tests: FORGED_RCVD_HELO,SPF_PASS X-Spam-Status: Suspected X-Scanned-By: MIMEDefang 2.63 on 131.104.94.198 X-Scanned-By: MIMEDefang 2.52 on 172.17.94.85 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Notice that his was processed through MIMEDefang twice and then Content Filtered by Mailman. Also, his content type is protocol="application/pkcs7-signature" whereas yours is "application/pgp-signature". There's also no Content-Disposition: line in Andrew's email headers, so it's possible that absence of that line makes a difference as well. By default, it appears that Mailman does not do content filtering. It also has pass rules (if filtering is enabled) for multipart/mixed, multipart/alternative and text/plain. So, it's possible that MIMEDefang is the culprit instead. -- Paul Schmehl As if it wasn't already obvious, my opinions are my own and not those of my employer. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
In freebsd-questions Digest, Vol 219, Issue 7 At Message: 20 On Tue, 10 Jun 2008 16:23:32 -0400 Andrew Berry <[EMAIL PROTECTED]> wrote: [..] > Content-Type: text/plain; charset="us-ascii" > > On 10-Jun-08, at 1:07 PM, Paul Schmehl wrote: > > > Andrew, maybe you could send a signed message, state in the body > > that it was signed, and then I can look at the headers and tell you > > what's going on. > > Here is a message which has been signed. > > --Andrew > > -- Note that I'm replying to a digest message so a) threading is screwed and b) I don't see full headers of individual messages, but this shows that your message hit the digest without attachment, and others report no attachment seen in list mail either, as this reply by Paul shows: > > Here is a message which has been signed. > > > > There's no sig attached, so it's getting stripped off somewhere. > This line in the headers looks to be the culprit: > X-Content-Filtered-By: Mailman/MimeDel 2.1.5 > > That will strip all attachments, including S/MIME. However, what normally happens to attachments to questions@, at least to digests, is that they get stripped with a note pointing to the original attachment, as this subsequent message from Chad illustrates: > Message: 27 > Date: Tue, 10 Jun 2008 15:32:45 -0600 > From: Chad Perrin <[EMAIL PROTECTED]> > Subject: Re: Problems opening mail on this list > To: freebsd-questions@freebsd.org > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset="us-ascii" Note Content-type: possibly modified from original? .. > On Tue, Jun 10, 2008 at 03:34:59PM -0500, Paul Schmehl wrote: > > --On Tuesday, June 10, 2008 16:23:32 -0400 Andrew Berry > > <[EMAIL PROTECTED]> wrote: > > > > >On 10-Jun-08, at 1:07 PM, Paul Schmehl wrote: > > > > > >>Andrew, maybe you could send a signed message, state in the body > > >>that it was signed, and then I can look at the headers and tell you > > >>what's going on. > > > > > >Here is a message which has been signed. > > > > > > > There's no sig attached, so it's getting stripped off somewhere. > > This line in the headers looks to be the culprit: > > X-Content-Filtered-By: Mailman/MimeDel 2.1.5 > > > > That will strip all attachments, including S/MIME. > > My PGP signatures seem to come through just fine, however. > > -- > Chad Perrin [ content licensed PDL: http://pdl.apotheon.org ] > Anonymous: "Eat your crow early, while it's young and tender. Don't wait > until it's old and tough." > -- next part -- > A non-text attachment was scrubbed... > Name: not available > Type: application/pgp-signature > Size: 195 bytes > Desc: not available > Url : > http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20080610/f86dad22/attachment-0001.pgp > > -- So Andrew, there's something different about your particular S/MIME attachments I guess. Another illustration from an earlier digest: : Message: 29 : Date: Tue, 10 Jun 2008 11:51:30 -0400 : From: Jon Radel <[EMAIL PROTECTED]> : Subject: Re: OT: lots of IPv6 DNS requests : To: Wojciech Puchar <[EMAIL PROTECTED]> : Cc: freebsd-questions@freebsd.org : Message-ID: <[EMAIL PROTECTED]> : Content-Type: text/plain; charset="iso-8859-1" : : Wojciech Puchar wrote: [.. content elided ..] : --Jon Radel : : -- next part -- : A non-text attachment was scrubbed... : Name: smime.p7s : Type: application/x-pkcs7-signature : Size: 3283 bytes : Desc: S/MIME Cryptographic Signature : Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20080610/cc6da5da/smime-0001.bin Dunno if that helps, but your Mac gadget seems to work differently .. cheers, Ian ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
--On Tuesday, June 10, 2008 15:32:45 -0600 Chad Perrin <[EMAIL PROTECTED]> wrote: My PGP signatures seem to come through just fine, however. Here's a test of my sig. -- Paul Schmehl As if it wasn't already obvious, my opinions are my own and not those of my employer.
Re: Problems opening mail on this list
--On Tuesday, June 10, 2008 15:32:45 -0600 Chad Perrin <[EMAIL PROTECTED]> wrote: On Tue, Jun 10, 2008 at 03:34:59PM -0500, Paul Schmehl wrote: --On Tuesday, June 10, 2008 16:23:32 -0400 Andrew Berry <[EMAIL PROTECTED]> wrote: > On 10-Jun-08, at 1:07 PM, Paul Schmehl wrote: > >> Andrew, maybe you could send a signed message, state in the body >> that it was signed, and then I can look at the headers and tell you >> what's going on. > > Here is a message which has been signed. > There's no sig attached, so it's getting stripped off somewhere. This line in the headers looks to be the culprit: X-Content-Filtered-By: Mailman/MimeDel 2.1.5 That will strip all attachments, including S/MIME. My PGP signatures seem to come through just fine, however. Yes it did. And it appears that this is the reason: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="H1spWtNR+x+ondvy" Content-Disposition: inline Andrew's is like this: Content-Type: multipart/signed; boundary=Apple-Mail-1-746495031; micalg=sha1; protocol="application/pkcs7-signature" Mime-Version: 1.0 (Apple Message framework v924) Date: Tue, 10 Jun 2008 16:23:32 -0400 References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> X-Mailer: Apple Mail (2.924) X-Spam-Scanner: SpamAssassin 3.04 (http://www.spamassassin.org/) on batman.cs.uoguelph.ca X-Spam-Score: hits=0.0 X-Spam-Level: X-Spam-Tests: FORGED_RCVD_HELO,SPF_PASS X-Spam-Status: Suspected X-Scanned-By: MIMEDefang 2.63 on 131.104.94.198 X-Scanned-By: MIMEDefang 2.52 on 172.17.94.85 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Notice that his was processed through MIMEDefang twice and then Content Filtered by Mailman. Also, his content type is protocol="application/pkcs7-signature" whereas yours is "application/pgp-signature". There's also no Content-Disposition: line in Andrew's email headers, so it's possible that absence of that line makes a difference as well. By default, it appears that Mailman does not do content filtering. It also has pass rules (if filtering is enabled) for multipart/mixed, multipart/alternative and text/plain. So, it's possible that MIMEDefang is the culprit instead. -- Paul Schmehl As if it wasn't already obvious, my opinions are my own and not those of my employer. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
On Tue, Jun 10, 2008 at 03:34:59PM -0500, Paul Schmehl wrote: > --On Tuesday, June 10, 2008 16:23:32 -0400 Andrew Berry > <[EMAIL PROTECTED]> wrote: > > >On 10-Jun-08, at 1:07 PM, Paul Schmehl wrote: > > > >>Andrew, maybe you could send a signed message, state in the body > >>that it was signed, and then I can look at the headers and tell you > >>what's going on. > > > >Here is a message which has been signed. > > > > There's no sig attached, so it's getting stripped off somewhere. > This line in the headers looks to be the culprit: > X-Content-Filtered-By: Mailman/MimeDel 2.1.5 > > That will strip all attachments, including S/MIME. My PGP signatures seem to come through just fine, however. -- Chad Perrin [ content licensed PDL: http://pdl.apotheon.org ] Anonymous: "Eat your crow early, while it's young and tender. Don't wait until it's old and tough." pgpoDPJSlGYmv.pgp Description: PGP signature
Re: Problems opening mail on this list
--On Tuesday, June 10, 2008 16:23:32 -0400 Andrew Berry <[EMAIL PROTECTED]> wrote: On 10-Jun-08, at 1:07 PM, Paul Schmehl wrote: Andrew, maybe you could send a signed message, state in the body that it was signed, and then I can look at the headers and tell you what's going on. Here is a message which has been signed. There's no sig attached, so it's getting stripped off somewhere. This line in the headers looks to be the culprit: X-Content-Filtered-By: Mailman/MimeDel 2.1.5 That will strip all attachments, including S/MIME. -- Paul Schmehl As if it wasn't already obvious, my opinions are my own and not those of my employer. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
On 10-Jun-08, at 1:07 PM, Paul Schmehl wrote: Andrew, maybe you could send a signed message, state in the body that it was signed, and then I can look at the headers and tell you what's going on. Here is a message which has been signed. --Andrew
Re: Problems opening mail on this list
On 10-Jun-08, at 11:49 AM, RW wrote: On Tue, 10 Jun 2008 11:37:48 -0400 "Bob McConnell" <[EMAIL PROTECTED]> wrote: I have gotten several messages on this list from an Andrew Barry which Lookout cannot open. I don't see any posts with that name in this list. Could they be spam? Typo on my last name :) --Andrew ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
On 10-Jun-08, at 1:07 PM, Paul Schmehl wrote: The message that Andrew sent in response to you did not have a digital signature on it. I don't know if that means it was stripped by the list software or he didn't sign the message. I disabled signing when sending that message, just so my response could be read. I'll send a message in a second with signing enabled. I've never noticed anyone having problems with digital signatures in other mailing lists I'm on, but it's possible that no one has bothered to say anything. --Andrew ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Problems opening mail on this list
--On Tuesday, June 10, 2008 13:00:13 -0400 Bob McConnell <[EMAIL PROTECTED]> wrote: Andrew, I have Outlook/Office 2003 SP3 with an Exchange server. Unfortunately, that means I do not have access to the raw messages, nor can I look at the full set of footers. Someone suggested your signature may be getting mangled by the listserve. Another reply said they have never seen any of your messages, so their SPAM filter appears to be blocking you. The message that Andrew sent in response to you did not have a digital signature on it. I don't know if that means it was stripped by the list software or he didn't sign the message. Andrew, maybe you could send a signed message, state in the body that it was signed, and then I can look at the headers and tell you what's going on. -- Paul Schmehl As if it wasn't already obvious, my opinions are my own and not those of my employer. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Problems opening mail on this list
Andrew, I have Outlook/Office 2003 SP3 with an Exchange server. Unfortunately, that means I do not have access to the raw messages, nor can I look at the full set of footers. Someone suggested your signature may be getting mangled by the listserve. Another reply said they have never seen any of your messages, so their SPAM filter appears to be blocking you. Bob McConnell -Original Message- From: Andrew Berry [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 10, 2008 11:50 AM To: Bob McConnell Cc: freebsd-questions@freebsd.org Subject: Re: Problems opening mail on this list On 10-Jun-08, at 11:37 AM, Bob McConnell wrote: > I have gotten several messages on this list from an Andrew Barry which > Lookout cannot open. The error message is "Can't open this item. Your > Digital ID name can not be found by the underlying security system." > Can > anyone tell me what is causing this? I typically sign my messages with S/Mime: http://en.wikipedia.org/wiki/S/MIME It means that not only can my message be verified by nearly every client, but messages can be easily encrypted to me as well (since the public key is included in the signature). Usually this works fine with Mailman and other mailing lists; the worst I've seen is that Sourceforge will mangle the text adding their advertisement, invalidating the signature. Other software tends to add footers as a separate MIME part. Looking in the source of one of my previous messages, I see that the following header is set, but that the corresponding signature attachment has been stripped: Content-Type: multipart/signed; boundary=Apple-Mail-117-728128490; micalg=sha1; protocol="application/pkcs7-signature" Perhaps your mail client is picking up on this header and misinterpreting it? What mail client are you using? --Andrew ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
--On Tuesday, June 10, 2008 11:37:48 -0400 Bob McConnell <[EMAIL PROTECTED]> wrote: I have gotten several messages on this list from an Andrew Barry which Lookout cannot open. The error message is "Can't open this item. Your Digital ID name can not be found by the underlying security system." Can anyone tell me what is causing this? Apparently Outlook thinks the message is encrypted, and it can't find your private key to decrypt it. Considering the tons of problems we have with encryption here, I'm not surprised. -- Paul Schmehl As if it wasn't already obvious, my opinions are my own and not those of my employer. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
On Tue, 10 Jun 2008 11:37:48 -0400 "Bob McConnell" <[EMAIL PROTECTED]> wrote: > I have gotten several messages on this list from an Andrew Barry which > Lookout cannot open. I don't see any posts with that name in this list. Could they be spam? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems opening mail on this list
On 10-Jun-08, at 11:37 AM, Bob McConnell wrote: I have gotten several messages on this list from an Andrew Barry which Lookout cannot open. The error message is "Can't open this item. Your Digital ID name can not be found by the underlying security system." Can anyone tell me what is causing this? I typically sign my messages with S/Mime: http://en.wikipedia.org/wiki/S/MIME It means that not only can my message be verified by nearly every client, but messages can be easily encrypted to me as well (since the public key is included in the signature). Usually this works fine with Mailman and other mailing lists; the worst I've seen is that Sourceforge will mangle the text adding their advertisement, invalidating the signature. Other software tends to add footers as a separate MIME part. Looking in the source of one of my previous messages, I see that the following header is set, but that the corresponding signature attachment has been stripped: Content-Type: multipart/signed; boundary=Apple-Mail-117-728128490; micalg=sha1; protocol="application/pkcs7-signature" Perhaps your mail client is picking up on this header and misinterpreting it? What mail client are you using? --Andrew ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Problems opening mail on this list
I have gotten several messages on this list from an Andrew Barry which Lookout cannot open. The error message is "Can't open this item. Your Digital ID name can not be found by the underlying security system." Can anyone tell me what is causing this? Thank you, Bob McConnell ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
