Discussion:
[fossil-users] Test From masquerading
Andy Bradford
2018-08-11 17:41:01 UTC
Permalink
Hello,

This is just a test.

Andy
--
TAI64 timestamp: 400000005b6f1fd2
Andy Bradford
2018-08-11 17:47:02 UTC
Permalink
Post by Andy Bradford
This is just a test.
Only now at the end do I realize that Fossil Users allowed subscribers
to hide their subscriber email address... pity.

Andy
--
TAI64 timestamp: 400000005b6f213b
Jungle Boogie
2018-08-12 07:39:53 UTC
Permalink
Post by Andy Bradford
Post by Andy Bradford
This is just a test.
Only now at the end do I realize that Fossil Users allowed subscribers
to hide their subscriber email address... pity.
Just curious, how did you masquerade your address? It might still work on other
mailing lists you're subscribed to.
Post by Andy Bradford
Andy
--
TAI64 timestamp: 400000005b6f213b
Andy Bradford
2018-08-12 20:24:41 UTC
Permalink
Post by Jungle Boogie
Just curious, how did you masquerade your address? It might still work
on other mailing lists you're subscribed to.
I have a script which sits as a wrapper around the /usr/sbin/sendmail
interface that takes care of it all for me. I have a simple ``database''
of recipient addresses and what the expected From and Envelope From
addresses should be and when the script is invoked, it parses the
mess822 headers out and rewrites them according to the rules.

In the case of Fossil Users, I have an instruction that causes the
Envelope From to be my subscriber address found in the mailing list
database, and the From to be a timestamped email address that expires
after 30 days.

The mailing list permits the message because it finds my subscription
via the Envelope From and permits it to be delivered.

The From address can be harvested and will only be useful for 30 days
which allows individuals to respond directly to my emails if they want
without undergoing any spam blocking.

Arguably, this script belongs in the MUA and while I use an MUA that is
highly extensible, I've never bothered to take the time to figure out
how to make it work there. :-)

If you look closely, and if gmail permits it (because it lamely
suppresses things that it thinks are duplicate messages), you'll see two
different email addresses based on which email you receive---the one
that gets used when I send directly to you, and the one that arrives in
the mailing list delivered email.

Andy
--
TAI64 timestamp: 400000005b7097ae
Continue reading on narkive:
Loading...