FUDforum
Fast Uncompromising Discussions. FUDforum will get your users talking.

Home » FUDforum Development » Bug Reports » Google Groups rewriting from addresses to handle DMARC policy
Show: Today's Messages :: Unread Messages :: Polls :: Message Navigator
| Subscribe to topic | Bookmark topic 
Return to the default flat view Create a new topic Submit Reply
Google Groups rewriting from addresses to handle DMARC policy [message #187615] Mon, 05 November 2018 05:11 Go to previous message
Zrubi is currently offline  Zrubi   Hungary
Messages: 5
Registered: November 2018
Karma:
Junior Member
add to buddy list
ignore all messages by this user
Hi,

I just created a PoC project to create a forum interface for some google(groups) based mailing lists.
Now we have been hit by this isuse:
www.spamresource.com/2014/04/google-groups-rewriting-from-addresses.html

As I use the auto user account creation feature, in practice this means that the forged From address causing the forum engine to create a user accoutn using the mailing list email address Smile
The side effects:
- all the affected users mails are appearing under this fake user.
- the password reset function sends out reset links to the public mailing lists.

With this bug - or missing feature to workaround google's bad workaround - makes the forum useless in case of google mailing lists.
I found out that in such cases:
- the mail address in the From filed is always ending with: '@googlegroups.com'
- the real sender address can be found in: 'X-Original-From'


I also started to investigate the responsible code.
It seems trivial to add such exeption, however I don't know if that mail header parsing module is third party code or not...
[Message index]
 
Read Message
Read Message
Read Message
Read Message
Previous Topic: memory problem/leak in category manager?
Next Topic: Convert MSG Files to MBOX
Goto Forum:
  

-=] Back to Top [=-
[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Tue Apr 13 00:22:20 EDT 2021

Total time taken to generate the page: 0.00755 seconds