[Kolab-devel] [issue783] envelope header from check has problems with mailinglists

[Bernhard Reiter]

New submission from Bernhard Reiter <bernhard at intevation.de>:

Kolab Server 2.0rc3:

When the envelope-header-from-check isn enabled,
it will compare the envelope and header from: lines of an 
email if that email is from our mail-domain in header or envelope.
The idea is: Not have somebody fake an from lines like boss at our.domain
without being boss.

This poses a problem with mailinglist that are running externally.
Some keep the from: headerline, but use a different envelope from
and as people might be subscribed on @our.domain, the check will fail.

A possible solution would be to rewrite the from: header line, if the email
is coming from extern to reflect the envelope from and the original from.
This way each user sees that the email was coming in with that envelope from
and can decide by themself (e.g. checking a signature) if this email originated
from the person it should originate from.

----------
assignedto: steffen
messages: 4826
nosy: bernhard, bh, martin, steffen
priority: urgent
status: unread
title: envelope header from check has problems with mailinglists
topic: kkc, server
________________________________________________
Kolab issue tracker <kolab-issues at intevation.de>
<https://intevation.de/roundup/kolab/issue783>
________________________________________________