Skip to Content.
Sympa Menu

en - [sympa-users] Question on Looping (possible bug)?

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: Matthew Caron <address@concealed>
  • To: address@concealed
  • Subject: [sympa-users] Question on Looping (possible bug)?
  • Date: Wed, 23 Mar 2016 13:13:57 -0400

Hello all,

I'm having an interesting problem which I thought I'd share. Setup:

1. I have address@concealed as the email address which goes to queue.
(Which I will call the 'command address'. I am not sure what the
developers call it.) As in, this is what my exim aliases line looks like:

sympa: "| /opt/sympa/bin/queue sympa"

2. If some not nice person sends an email with a spoofed from, being
address@concealed to address@concealed, the mailing list sits there
talking to itself, replying back and forth that there are no commands in
the email, taking longer and longer to parse the email each time and
eventually pegging the CPU, until I break the chain by setting the alias
to be my email address and letting the failure come to me.

I'd like to avoid this, but, in looking at the code (specifically
src/lib/Sympa/Spindle/ProcessIncoming.pm) it seems that the
loop_prevention stuff (specifically loop_prevention_regex) is only
applied in the case of the email going to a real mailing list, and not
to the control mailing list.

I also note that, on replies from this email address, the X-Loop header
is not set, also because it's not on a mailing list (at least, that's
what it looks like happens in DoForward to me).

Before I start hacking on the code, I wanted to ask if anyone had any
ideas. It feels like this is a solved problem and I'm missing something
very obvious, but after a couple of hours of looking through docs, I
don't have any solution.

Thanks in advance.



--
"When a self-governing people confer upon their government the power
to take money from some and give it to others, the process will not
stop until the last bone of the last taxpayer is picked bare."
-- Howard E. Kershner (Kershner's First Law)
PGP Key: http://www.mattcaron.net/pgp_key.txt
~~ Matt Caron ~~




Archive powered by MHonArc 2.6.19+.

Top of Page