Re: dcc on empty email

2024-04-10 Thread Henrik K via users


Perhaps just check your old notes? :-P

https://lists.apache.org/thread/6fspd1my9xjdjbz16zp7dk66vn44xccz

On Wed, Apr 10, 2024 at 10:42:35PM -0400, Alex wrote:
> Hi,
> 
> I'm noticing DCC is triggering on emails with an empty body. I'd like to
> create a hash that matches messages with an empty body and other simple
> messages.
> 
> What am I doing wrong? I've tried it with a zero-length file as well as 
> one
> with just a few characters. It looks like I don't understand what the
> format of the file should be.
> 
> [root@beast dcc]# /usr/bin/dccproc -QCw whiteclnt < dcc-empty
> missing message body; fatal error
> 
> 
> I have a better understanding of how this works now. It apparently still
> requires a valid email to be used, just with an actual empty body if I wanted
> to whitelist that portion of it.
> 
> /usr/bin/dccproc -QCw whiteclnt < email-with-empty-body
> X-DCC-www.nova53.net-Metrics: [1]beast.example.com 1204; Body=0 Fuz1=0 Fuz2=0
>                             reported: 0               checksum  server
>                  env_From: d41d8cd9 8f00b204 e9800998 ecf8427e
>                      From: 55a5141a 442cf35f 22622946 72511b73
>                Message-ID: cebc1e5c 40f54129 90709930 ee918829
>                  Received: 9afca068 dc711459 c84cadb6 627877e9
>                      Body: d1b04397 6af3d941 68459a63 a155b202       0
>                      Fuz1: 3d69b970 c60c2b73 95050fee 7971cae8       0
>                      Fuz2: d35d922e 637a421c 0da33c04 8498ab36       0
> 
> although I'm not sure now where these values should be used/stored for dcc?
> 
> I also happened across this link that contains a list of checksums for nearly
> empty messages, although I don't know how current or useful it is.
> [2]https://www.iecc.com/dcc-testmsg-whitelist.txt
> 
> 
>  
> 
> References:
> 
> [1] http://beast.example.com/
> [2] https://www.iecc.com/dcc-testmsg-whitelist.txt


Re: dcc on empty email

2024-04-10 Thread Alex
Hi,

> I'm noticing DCC is triggering on emails with an empty body. I'd like to
> create a hash that matches messages with an empty body and other simple
> messages.
>
> What am I doing wrong? I've tried it with a zero-length file as well as
> one with just a few characters. It looks like I don't understand what the
> format of the file should be.
>
> [root@beast dcc]# /usr/bin/dccproc -QCw whiteclnt < dcc-empty
> missing message body; fatal error
>

I have a better understanding of how this works now. It apparently still
requires a valid email to be used, just with an actual empty body if I
wanted to whitelist that portion of it.

/usr/bin/dccproc -QCw whiteclnt < email-with-empty-body
X-DCC-www.nova53.net-Metrics: beast.example.com 1204; Body=0 Fuz1=0 Fuz2=0
reported: 0   checksum  server
 env_From: d41d8cd9 8f00b204 e9800998 ecf8427e
 From: 55a5141a 442cf35f 22622946 72511b73
   Message-ID: cebc1e5c 40f54129 90709930 ee918829
 Received: 9afca068 dc711459 c84cadb6 627877e9
 Body: d1b04397 6af3d941 68459a63 a155b202   0
 Fuz1: 3d69b970 c60c2b73 95050fee 7971cae8   0
 Fuz2: d35d922e 637a421c 0da33c04 8498ab36   0

although I'm not sure now where these values should be used/stored for dcc?

I also happened across this link that contains a list of checksums for
nearly empty messages, although I don't know how current or useful it is.
https://www.iecc.com/dcc-testmsg-whitelist.txt


dcc on empty email

2024-04-10 Thread Alex
Hi,
I'm noticing DCC is triggering on emails with an empty body. I'd like to
create a hash that matches messages with an empty body and other simple
messages.

What am I doing wrong? I've tried it with a zero-length file as well as one
with just a few characters. It looks like I don't understand what the
format of the file should be.

[root@beast dcc]# /usr/bin/dccproc -QCw whiteclnt < dcc-empty
missing message body; fatal error