Package: policyd-weight
Version: 0.1.15.2-5
Severity: normal

Dear Maintainer,

policyd-weight will always reply "DUNNO" when processing a mail with an empty
envelope sender. This allows spammers to bypass the filter.

Steps to reproduce:
>From some remote system, telnet to the server and send
HELO itsme.com
MAIL FROM:<>
RCPT TO:<p...@ralfj.de>
DATA
Hello
.

Actual behaviour:
The mail is accepted, and it is not even processed by policyd-weight
(no header is added).

Expected behaviour:
The mail should be rejected as I am not itsme.com - or, at the very
least, it should be processed by policyd-weight as normal.

Kind regards
Ralf

-- System Information:
Debian Release: 7.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-042stab078.27 (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages policyd-weight depends on:
ii  adduser          3.113+nmu3
ii  libnet-dns-perl  0.66-2+b2
ii  libnet-ip-perl   1.25-3
ii  lsb-base         4.1+Debian8+deb7u1
ii  perl             5.14.2-21+deb7u1

Versions of packages policyd-weight recommends:
ii  perl [libsys-syslog-perl]  5.14.2-21+deb7u1

policyd-weight suggests no packages.

-- Configuration Files:
/etc/default/policyd-weight changed:
DAEMON_OPTS="-f /etc/policyd-weight.conf"


-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to