RE: SA DKIM related bug 6462 - Possibly Gmail, Sendmail and/or Thunderbird related?

From: Murray S. Kucherawy <msk_at_cloudmark.com>
Date: Thu, 15 Dec 2011 16:09:12 -0800

> -----Original Message-----
> From: opendkim-users-bounce_at_lists.opendkim.org [mailto:opendkim-users-bounce_at_lists.opendkim.org] On Behalf Of Kevin A. McGrail
> Sent: Thursday, December 15, 2011 3:26 PM
> To: Axb; opendkim-users_at_lists.opendkim.org
> Subject: SA DKIM related bug 6462 - Possibly Gmail, Sendmail and/or Thunderbird related?
>
> A diff and lots of trial and error testing showed that the failure was
> because of this:
>
> -To: "Kevin A. McGrail" <KMcGrail_at_PCCC.com>
> +To: "Kevin A. McGrail" <KMcGrail_at_pccc.com>
>
> Specifically, the case change on the To: header.
>
> So what rewrote the To: header and why?

Here's an easy test:

1) Pick a destination that isn't listening right now, but has published an A or MX so it's ostensibly deliverable. I used "example.com".

2) Invoke sendmail directly from the command line to send a message to your destination. When injecting the message, ensure the domain in the To: is all-caps.

$ sendmail postmaster_at_example.com
From: your-email_at_your-domain.com
To: postmaster_at_EXAMPLE.COM
Subject: test

Test
<CTRL-D>

3) As root, do "mailq". Identify the pending job you just created.

pBG01WMq025614 5 Thu Dec 15 16:01 <msk_at_medusa.blackops.org>
                 (Deferred: Operation timed out with example.com.)
                                         <postmaster_at_example.com>

4) Look at the queue file, which contains all the queue metadata and a copy of the header block. The filename is typically /var/spool/mqueue/qf<queue-ID>. In my case it includes this:

[...]
H??Date: Thu, 15 Dec 2011 16:01:18 -0800 (PST)
H??Message-Id: <201112160001.pBG01IHM025609_at_medusa.blackops.org>
H??From: msk_at_blackops.org
H??To: postmaster_at_example.com
H??Subject: test

The mapping to lowercase has happened before it left my local machine's queue. No MUA was involved. And I turned off spamass-milter before doing this.

Looks like sendmail's the culprit.

-MSK
Received on Fri Dec 16 2011 - 00:09:21 PST

This archive was generated by hypermail 2.3.0 : Mon Oct 29 2012 - 23:20:22 PST