FUDforum: Bug Reports » Google Groups rewriting from addresses to handle DMARC policy

Home » FUDforum Development » Bug Reports » Google Groups rewriting from addresses to handle DMARC policy

Show: Today's Messages :: Polls :: Message Navigator

Google Groups rewriting from addresses to handle DMARC policy [message #187615]

Mon, 05 November 2018 10:11

Zrubi

Messages: 5
Registered: November 2018

Karma:

Junior Member

Hi,

I just created a PoC project to create a forum interface for some google(groups) based mailing lists.
Now we have been hit by this isuse:
www.spamresource.com/2014/04/google-groups-rewriting-from-addresses.html

As I use the auto user account creation feature, in practice this means that the forged From address causing the forum engine to create a user accoutn using the mailing list email address Smile

The side effects:
- all the affected users mails are appearing under this fake user.
- the password reset function sends out reset links to the public mailing lists.

With this bug - or missing feature to workaround google's bad workaround - makes the forum useless in case of google mailing lists.
I found out that in such cases:
- the mail address in the From filed is always ending with: '@googlegroups.com'
- the real sender address can be found in: 'X-Original-From'

I also started to investigate the responsible code.
It seems trivial to add such exeption, however I don't know if that mail header parsing module is third party code or not...

Report message to a moderator

[Message index]

		Google Groups rewriting from addresses to handle DMARC policy By: Zrubi on Mon, 05 November 2018 10:11
		Re: Google Groups rewriting from addresses to handle DMARC policy By: naudefj on Mon, 05 November 2018 19:32
		Re: Google Groups rewriting from addresses to handle DMARC policy By: Zrubi on Wed, 07 November 2018 13:07
		Re: Google Groups rewriting from addresses to handle DMARC policy By: Zrubi on Sat, 02 February 2019 12:46

Previous Topic:	memory problem/leak in category manager?
Next Topic:	Convert MSG Files to MBOX

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat Nov 30 23:08:12 GMT 2024

Total time taken to generate the page: 0.04348 seconds