Re: [maildropl] Feature request

[Robin B. <rob...@ro...>]

On Sat, April 9, 2005 13:38, Ed W said:
>

>> I use a perl script to parse a file and create a maildrop filter file
>> (that is included by the "main" maildrop file). if interested, mail me.
>>
>>
>> having maildrop to create folders automatically will make you vulnerable
>> to a "random folders creation" attack. I mean, if you just look up some
>> header and create a folder automatically, then someone can you send you
>> messages with random values (or even real ones) so you'll get a lot of
>> folders for MLs you never subscribed to (and that may not exist).
>>
>> Also, for some MLs, I prefer to have a single folder for a group of
>> multiple MLs, while for others (each has too many messages), I prefer to
>> use a folder for each ML.
>
>
> I agree.  Actually in my case I validate the input.
>
>
> However, I also have a number of virtual users with a complicated
> maildrop script.  Lets suppose tomorrow I decide to add Spam filtering to
> our services, it them means having to write another script to go through
> and the relevant subfolders to all the virtual accounts.  Much easier to
> be able to just make the script deliver to the new folder and have it auto
> created...
>
> Anyway, I have worked around it by creating a small script which uses a
> global variable, validates it for nasty characters, then creates the folder
> and adds it to the subscribed folder file.  I just include it where I need
> to create a new folder.  Not that fast, but good enough.

Ed,

I use the following code:

{
        if ( /^List-Post: <mailto:![0-9A-Za-z_\-]*!@.*!>/ \
                || /^Delivered-To: mailing list ![0-9A-Za-z_\-]*!@.*/ \
                || /^X-Mailing-List:[:space:]![0-9A-Za-z_\-]*!@.*/ \
                || /^Return-Path: <!emea-communications!@pmi\.org!>/ \
                || /^Return-Path: <!newsletters!@kbalertz\.com!>/ \
                || /^Return-Path: <!newsletter!@which\.co\.uk!>/ \
                || /^To: "York City Mailing List"
<!yorkcity!@soccermail\.com!>/ )
        {
                exception {
                        LIST_FOLDER="${MATCH2}${MATCH3}"
                        LIST_FOLDER_NAME=`${ECHO} ${LIST_FOLDER} | ${SED}
's/\./\\\\\./g'`


The first three lines catch most of the mailing lists I subscribe to; the
remaining four lines are for indivudual cases which are not sent using
mailing list software.

The last line is required to quote any periods in the folder name.

${ECHO} is defined at the top of the script as "/bin/echo"

HTH,

R.
-- 
http://robinbowes.com