Re: [Sqlgrey-users] VERP issues

[Michael S. <Mic...@lr...>]

Hi Andrew,

implementing deverp_user is a very delicate thing. You want to catch most
of the verp-style addresses. On the other hand you do not want to
eliminate random chars which spammers put in their addresses to circumvene
filters.

Your first example indeed shows a case where a non-verp address was hit.
But that does not matter. The most you will need a few more entries in
your database for this sender_name. And this case is rare. On the other
hand, the reqex will match a lot of verb-addresses, not only BATV
ones.

The change you propose for your second example would return

   grbounce-#

instead of

   grbounce-#-RCPT or grbounce-#=RCPT

what I would expect. That means you discovered a new class of VERB
addresses, which should be handled separately.

On Fri, 11 Aug 2006, Andrew Findlay wrote:

> I am testing sqlgrey and have come across a problem with the
> deverp_user routine. It is missing some obvious VERP addresses and is
> messing up some obvious non-VERP ones.
>
> Here are some examples:
>
> perl -d sqlgrey.dist
> ...
>   DB<1> print
> deverp_user('bounce-32993-4906286','and...@sk...');
> bounce-#
>
> That shows what it *should* be doing. Now for some problems:
>
>   DB<2> print
> deverp_user('grbounce-JbS8DwUAAAC4pJBj3F9adwKL1ZerRRc_=andrew.findlay=skills-1st.co.uk', 'and...@sk...');
> grbounce-JbS8DwUAAAC4pJBj3F9adwKL1ZerRRc_=RCPT
>
> The source here is a Google alert service.
>
>   DB<3> print deverp_user('andrew.findlay','an...@ex...')
> RCPT.findlay
>   DB<5> print deverp_user('andrew.findlay','drew@x.y')
> anRCPT.findlay
>
> Here we see a very simple sender address being messed up by an even
> simpler sender address.
>
> The appended patch for 1.7.3 fixes both issues, but may prevent the
> correct de-VERPing of BATV addresses. I have not found any in my logs
> that match draft-levine-mass-batv-02, but it would seem fairly easy to
> recognise the simple 'prvs' scheme reliably.
>
> I think it may be best to change deverp_user to use one simple explicit
> pattern for each known VERP style rather than try to build clever
> regexes to match several at once.
>
> Andrew
>

Michael Storz
--
======================================================
Leibniz-Rechenzentrum      |    <mailto:St...@lr...>
Boltzmannstr. 1            |    Fax: +49 89 35831-9700
85748 Garching / Germany   |    Tel: +49 89 35831-8840
======================================================