Fwd: bts-link/packages.qa/alioth mailbombing dsa

Fri Jan 9 10:55:46 UTC 2009

Here it is

---------- Forwarded message ----------
From: Peter Palfrader <weasel at debian.org>
Date: Thu, Jan 8, 2009 at 22:06
Subject: bts-link/packages.qa/alioth mailbombing dsa
To: hertzog at debian.org, sgran at debian.org, morph at debian.org
Cc: DSA <debian-admin at lists.debian.org>

Hi,

I pinged all of you on IRC, but not all of you were around.

Here's one example of several mails that dsa got today.

what happened:

1) bts-link injects mails into merkel using smtp to port 25.
  these mails to not have a message-id header.
2) packages.qa's dispatch.pl script barfs on such mails,
  spewing stuff to stderr, producing bounces:
  a bounce is sent to the sender address,
  bts-link-upstream at lists.alioth.debian.org
3) mailman sends a reply to the bounce to mailer-daemon at master.

All three of those things should be fixed, hence this email.

Morph's fixing the bts link mails to include msgid headers.

Buxy, can you fix dispatch.pl to handle mails without msgid headers?
Lines 62 and 65 are the once that gave warnings, so that's the place to
look at.

Sgran, buxy: can you fix alioth's mailman to not reply to bounces?  Or
is this a lost cause?

Morph, maybe the envelope from address for these mails shouldn't point
to a mailinglist but to the person/group responsible for running the
script?

Cheers,
weasel
--
                          |  .''`.  ** Debian GNU/Linux **
     Peter Palfrader      | : :' :      The  universal
 http://www.palfrader.org/ | `. `'      Operating System
                          |   `-    http://www.debian.org/

---------- Forwarded message ----------
From: bts-link-upstream-owner at lists.alioth.debian.org
To: mailer-daemon at master.debian.org
Date: Thu, 08 Jan 2009 20:14:15 +0000
Subject: Mail delivery failed: returning message to sender
You are not allowed to post to this mailing list, and your message has
been automatically rejected.  If you think that your messages are
being rejected in error, contact the mailing list owner at
bts-link-upstream-owner at lists.alioth.debian.org.

---------- Forwarded message ----------
From: Mail Delivery System <Mailer-Daemon at master.debian.org>
To: bts-link-upstream at lists.alioth.debian.org
Date: Thu, 08 Jan 2009 20:14:06 +0000
Subject: Mail delivery failed: returning message to sender
This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

 pipe to | /org/packages.qa.debian.org/bin/dispatch.pl
   generated by koffice_contact at packages.qa.debian.org

The following text was generated during the delivery attempt:

------ pipe to | /org/packages.qa.debian.org/bin/dispatch.pl
      generated by koffice_contact at packages.qa.debian.org ------

Use of uninitialized value in scalar chop at
/org/packages.qa.debian.org/bin/dispatch.pl line 62, <STDIN> line 73.
Use of uninitialized value in concatenation (.) or string at
/org/packages.qa.debian.org/bin/dispatch.pl line 65, <STDIN> line 73.

------ This is a copy of the message, including all the headers. ------

Return-path: <bts-link-upstream at lists.alioth.debian.org>
Received: from powell.debian.org ([87.106.64.223])
       by master.debian.org with esmtp (Exim 4.63)
       (envelope-from <bts-link-upstream at lists.alioth.debian.org>)
       id 1LL1GX-0000iT-OD
       for koffice_contact at packages.qa.debian.org; Thu, 08 Jan 2009
20:14:05 +0000
Received: from merkel.debian.org ([192.25.206.16])
       by powell.debian.org with esmtp (Exim 4.63)
       (envelope-from <bts-link-upstream at lists.alioth.debian.org>)
       id 1LL1GW-00083C-IU
       for koffice at packages.debian.org; Thu, 08 Jan 2009 20:14:04 +0000
Received: from localhost ([127.0.0.1] helo=merkel.debian.org)
       by merkel.debian.org with esmtp (Exim 4.63)
       (envelope-from <bts-link-upstream at lists.alioth.debian.org>)
       id 1LL168-0001Kg-O5; Thu, 08 Jan 2009 13:03:20 -0700
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
From: bts-link-upstream at lists.alioth.debian.org
To: control at bugs.debian.org
Cc: bts-link-upstream at lists.alioth.debian.org, koffice at packages.debian.org
Subject: [bts-link] source package koffice
X-BTS-Link: koffice
Reply-To: bts-link-devel at lists.alioth.debian.org
Delivered-To: koffice at packages.debian.org

#
# bts-link upstream status pull for source package koffice
# see http://lists.debian.org/debian-devel-announce/2006/05/msg00001.html
#

user bts-link-upstream at lists.alioth.debian.org

# remote status report for #180801
#  * http://bugs.kde.org/show_bug.cgi?id=3D54845
#  * remote status changed: NEW -> RESOLVED
#  * remote resolution changed: (?) -> FIXED
#  * closed upstream
tags 180801 + fixed-upstream
usertags 180801 - status-NEW
usertags 180801 + status-RESOLVED resolution-FIXED

# remote status report for #271495
#  * http://bugs.kde.org/show_bug.cgi?id=3D91867
#  * remote status changed: NEW -> RESOLVED
#  * remote resolution changed: (?) -> LATER
#  * closed upstream
tags 271495 + fixed-upstream
usertags 271495 - status-NEW
usertags 271495 + status-RESOLVED resolution-LATER

# remote status report for #342549
#  * http://bugs.kde.org/show_bug.cgi?id=3D41954
#  * remote status changed: NEW -> RESOLVED
#  * remote resolution changed: (?) -> LATER
#  * closed upstream
tags 342549 + fixed-upstream
usertags 342549 - status-NEW
usertags 342549 + status-RESOLVED resolution-LATER

# remote status report for #469303
#  * http://bugs.kde.org/show_bug.cgi?id=3D159107
#  * remote status changed: UNCONFIRMED -> RESOLVED
#  * remote resolution changed: (?) -> FIXED
#  * closed upstream
tags 469303 + fixed-upstream
usertags 469303 - status-UNCONFIRMED
usertags 469303 + status-RESOLVED resolution-FIXED

thanks

-- 
Sandro Tosi (aka morph, morpheus, matrixhasu)
My website: http://matrixhasu.altervista.org/
Me at Debian: http://wiki.debian.org/SandroTosi