Package: mlmmj
Version: 1.2.19.0-1
Severity: normal
Tags: upstream

When mlmmj-send injects mail into the MTA, it uses SMTP to 127.0.0.1 on port 25.

Unfortunately, it doesn't correctly implement the SMTP standard: it sends an 
EHLO
command immediately after it gets the first line of the greeting, which in my 
case
starts with "220-" and is followed by additional lines.  The result is that it
interprets these additional lines of the greeting as a response to the EHLO, 
which
of course fails.

I don't know if this wrong behavior is simply because it only waits for one line
(and, I'd guess, checks that the line starts with "2"), or because it is 
confused
by the several seconds the MTA waits before sending its greeting.  Both kinds of
behavior have been observed in many spamming tools which is precisely why I have
configured a multiline greeting and a delay.

In my opinion when mlmmj runs on the same host as the MTA, it should be at 
least an
option to inject mail directly via a pipe to /usr/sbin/sendmail; but I have not 
found
such an option.

-- System Information:
Debian Release: 9.9
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.16-x86_64-linode118 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages mlmmj depends on:
ii  debconf [debconf-2.0]              1.5.61
ii  equivs-mta [mail-transport-agent]  1.0
ii  libc6                              2.24-11+deb9u4

mlmmj recommends no packages.

Versions of packages mlmmj suggests:
pn  mlmmj-php-web        <none>
pn  mlmmj-php-web-admin  <none>

-- debconf information excluded

Reply via email to