Milter-greylist

At Thu, 26 Oct 2006 16:07:25 -0000,
hwdahm wrote:
> 
> --- In milter-greylist@yahoogroups.com, "rdrvzet" <Rini@...> wrote:
> >
> > --- In milter-greylist@yahoogroups.com, manu@ wrote:
> > >
> > > Rini van Zetten <Rini@> wrote:
> > > 
> > > > I use milter-greylist version 2.0.2.
> > > > 
> > > > Is there a solution ?
> > > > Is the 3.0 rc stable enough to use ?
> > > 
> > > I use 3.0rc in production. Can you give it a try?
> > > 
> > 
> > Ok I will try, thanks for answering.
> > 
> > Rini
> > 
> > > -- 
> > > Emmanuel Dreyfus
> > > http://hcpnet.free.fr/pubz
> > > manu@
> > >
> >
> 
> With 3.0rc5 I had the same problem today with a semicolon.
> By the way: we use 3.0rc5 on two mailservers, with half a million
> greylisted entries each day, no more trouble since upgrading from 2.02.
> 

This bug should be considered as a DoS vulnerability. We must validate
email addresses and strip unnecessary parts.

http://www.j10n.org/files/milter-greylist-3.0rc6-dosfix.patch

If we reject rare addresses like <(comment) "Quoted" @[1.2.3.4]>, it
can be fixed in simpler manner.