Olaf Hopp
2018-Apr-20 13:08 UTC
Sieve "redirect" changes envelope sender in 2.3. / pigeonhole 0.5
OK, I found a solution: trusted_users = exim:dovecot in my exim.conf fixed it. Anyway this is an important change of behavour between 2.2 und 2.3 In 2.2 the "dovecot" under exims "trusted_users" was not necessary. Olaf On 04/20/2018 02:53 PM, Olaf Hopp wrote:> On 04/20/2018 02:01 PM, Olaf Hopp wrote: >> Hi (Stephan?), >> is it a new feature of dovecot 2.3 /pigeonhole 0.5 that a sieve "redirect" changes the envelope sender of >> a redirected mail or simply a bug ? >> >> A sends mail to B, B redirects to C >> C sees B (not A!) as envelope sender. >> It is not a problem if C gets the mail but if that mail bounces >> for various reasons it goes back to B and A will never know about this. >> >> I thick this is came with 2.3 / pigeonhole 0.5 ? >> >> # 2.3.1 (c5a5c0c82): /etc/dovecot/dovecot.conf >> # Pigeonhole version 0.5.devel (61b47828) >> # OS: Linux 2.6.32-696.23.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) >> >> >> Regards, >> Olaf >> > > I moved one version back, same config except those changes in 10-ssl.conf necessary for the 2.2->2.3 upgrade > > # 2.2.35 (b1cb664): /opt/dovecot/etc/dovecot/dovecot.conf > # Pigeonhole version 0.4.23 (b2e41927) > # OS: Linux 2.6.32-696.23.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) > > and this version keeps the envelope sender untouched. > So this a regression with 2.3 / 0.5 > Envelope *senders* should never ever be modified. > > Regards, > Olaf > >-- Karlsruher Institut f?r Technologie (KIT) ATIS - Abt. Technische Infrastruktur, Fakult?t f?r Informatik Dipl.-Geophys. Olaf Hopp - Leitung IT-Dienste - Am Fasanengarten 5, Geb?ude 50.34, Raum 009 76131 Karlsruhe Telefon: +49 721 608-43973 Fax: +49 721 608-46699 E-Mail: Olaf.Hopp at kit.edu atis.informatik.kit.edu www.kit.edu KIT ? Die Forschungsuniversit?t in der Helmholtz-Gemeinschaft Das KIT ist seit 2010 als familiengerechte Hochschule zertifiziert. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 5304 bytes Desc: S/MIME Cryptographic Signature URL: <https://dovecot.org/pipermail/dovecot/attachments/20180420/0a0033f1/attachment-0001.p7s>
Steffen Kaiser
2018-Apr-23 05:28 UTC
Sieve "redirect" changes envelope sender in 2.3. / pigeonhole 0.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 20 Apr 2018, Olaf Hopp wrote:> On 04/20/2018 02:53 PM, Olaf Hopp wrote: >> On 04/20/2018 02:01 PM, Olaf Hopp wrote: >>> Hi (Stephan?), >>> is it a new feature of dovecot 2.3 /pigeonhole 0.5 that a sieve "redirect" >>> changes the envelope sender of >>> a redirected mail or simply a bug ? >>> >>> A sends mail to B, B redirects to C >>> C sees B (not A!) as envelope sender. >>> It is not a problem if C gets the mail but if that mail bounces >>> for various reasons it goes back to B and A will never know about this.That's just one problem these days.>> Envelope *senders* should never ever be modified.If the domain of sender A has SPF records installed and B redirects to C, but keeps the envelope sender A, the SPF check will fail on C. Looks like any redirect has potential to fail, unless to establish some sort of SRS as well. - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBWt1u98QnQQNheMxiAQISqgf+JsHAG9PRFJ+A2XMOTgFN6fCeVHAHDA9+ bmoQV89lbU60TXyrEIsAsVafCZgNWpIeqI9x4gfkAEXkw9TW1AY0Sk7pk07K8Wbw G3aSpNI2VKFrgQ21ysLbiLn2urGapQzavmkV1UmWq4iIKfnNKPocFW+EXLWm7Gdx 7lXK9nMFwG0n8M3uLN8+p+quh6COF7cW0UKQmELcgYMBIiwZWbyTt9xo5Tj9eqsk blUaBHxREKQhs+FsgQPEaWsnE73wRUsWzt7yRRw+kZFa3r3OLUc1io9duc+AKJ2Y j3dkqq5bqHlDVoiprtdFVEicWhWgJ1t4YQWOZ8iLwprq2kwkHgk+gA==cbC3 -----END PGP SIGNATURE-----
Olaf Hopp
2018-Apr-23 09:01 UTC
Sieve "redirect" changes envelope sender in 2.3. / pigeonhole 0.5
On 04/23/2018 07:28 AM, Steffen Kaiser wrote:> >>> Envelope *senders* should never ever be modified. > > If the domain of sender A has SPF records installed and B redirects to C, but keeps the envelope sender A, the SPF check will fail on C. >That's the reason why I say SPF is broken by design. People using it, should hopefully know what they are doing. But that's a little bit OT for this list. Olaf -- Karlsruher Institut f?r Technologie (KIT) ATIS - Abt. Technische Infrastruktur, Fakult?t f?r Informatik Dipl.-Geophys. Olaf Hopp - Leitung IT-Dienste - Am Fasanengarten 5, Geb?ude 50.34, Raum 009 76131 Karlsruhe Telefon: +49 721 608-43973 Fax: +49 721 608-46699 E-Mail: Olaf.Hopp at kit.edu atis.informatik.kit.edu www.kit.edu KIT ? Die Forschungsuniversit?t in der Helmholtz-Gemeinschaft Das KIT ist seit 2010 als familiengerechte Hochschule zertifiziert. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 5304 bytes Desc: S/MIME Cryptographic Signature URL: <https://dovecot.org/pipermail/dovecot/attachments/20180423/fa23d710/attachment.p7s>