Package: courier-mlm Version: 0.73.1-1.6 Severity: normal Dear Maintainer,
I've encountered some bugs in couriermlm, when a list is setup the option 'NOBOZOS=1' is set by default, which should bounce bad ctl command messages sent to user-list@domain instead of user-list-command@domain. What's supposed to be happening is that messages like: cat <<EOF To: user-list@domain Subject: list manager, do this help EOF bounce, because they should be sent to: user-list-help@domain in order to work correctly. Basically any message starting with a keyword like help. subscribe, or unsubscribe (perhaps a few others) is supposed to bounce. However, the actually filtering is way too aggressive. Any message where any line begins with a keyword, wil bounce. e.g: cat <<EOF To: user-list@domain Subject: leftover pizza Hi guys, There's some pizza leftover in the kitchen. Help yourselves! -Me EOF will bounce. You won't bounce a message like this, though: cat <<EOF To: user-list@domain Subject: leftover pizza Hi guys, There's some pizza leftover in the kitchen. So help yourselves! -Me EOF because that line no longer *starts* with the keyword 'help'. This behaviour, I would argue, is even worse than not informing people the they haven't formatted their subscribe / unsubscribe messages properly, which the list admin should recognize immediatly. In the 'NOBOZOS=1' case you bounce perfectly good mail for no immediatly obvious reason. The behavior should either be corrected, or the default should be 'NOBOZOS=0'. Best Regards, -Fred -- System Information: Debian Release: 8.5 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages courier-mlm depends on: ii courier-base 0.73.1-1.6 ii courier-maildrop 0.73.1-1.6 ii libc6 2.19-18+deb8u4 ii libgcc1 1:4.9.2-10 ii libgdbm3 1.8.3-13.1 ii libstdc++6 4.9.2-10 courier-mlm recommends no packages. Versions of packages courier-mlm suggests: ii courier-doc 0.73.1-1.6 -- no debconf information