On 8/15/2011 3:39 PM, Jared Johnson wrote:
Hi,

We got a bug report from someone using IBM's Lotus suite (I think for both
their MUA and MTA).  Their users would often send messages where all the
content was in the subject and they didn't bother sending any message
content.  I'm not sure if it's due to an apparently uncommon behavior for
their particular MUA or their MTA, but every one of these messages was
coming through with data in a form that looked like this:

"Subject: howdy\r\n.\r\n"

As a FYI, I've been seeing bot-emitted spam that appears to have extra \r at the end of _all_ header lines, and the qpsmtpd parser seems to be treating all of it as part of the _body_. IOW: except for the received line inserted by qpsmtpd, qpsmtpd doesn't see _any_ headers.

This implementation is backrev (0.80 I think), and as it's only spam from one particular bot, we don't care about that particular wierdness enough to investigate further. But it's worth being aware of.

Reply via email to