Milter-greylist

Hi MG-folks!

I just want to note, that if someone is using milter-greylist in
conjunction with libspf2 and is thinking about to turn on IPv6 support,
the libspf2 version plays an important role. In this case at least
version 1.2.10 is mantatory otherwise milter-greylist suffers from
several serious bugs in libspf2 IPv6 routines causing milter-greylist to
abort unexpectly. For those who are interested in technical details: A
couple of allocated buffers has been allocated with IPv4 defines instead
of IPv6 ones. A mistake not of a logical kind, but maybe coming from
copy & paste ...

In sufficient new distributions this might be probably not a problem at
all. But several postings in the recent past showed that some may be
stuck in an older configuration or OS release. In harder cases one
could use libspf2 compiled from source - it's straight forward to do.


Johann Klasek

On Mon, Oct 14, 2013 at 12:04:50AM +0200, Johann Klasek wrote:
> I just want to note, that if someone is using milter-greylist in
> conjunction with libspf2 and is thinking about to turn on IPv6 support,
> the libspf2 version plays an important role. In this case at least
> version 1.2.10 is mantatory otherwise milter-greylist suffers from
> several serious bugs in libspf2 IPv6 routines causing milter-greylist to
> abort unexpectly. For those who are interested in technical details: A
> couple of allocated buffers has been allocated with IPv4 defines instead
> of IPv6 ones. A mistake not of a logical kind, but maybe coming from
> copy & paste ...

Yes, I told the maintainers in 2009 (two thousand and nine) about this
problem. I've even included the necessary patch. Unfortunately it took
them until June this year to release a new version with a fix in it.

	Kind regards

-- 
Matthias Scheler                                  http://zhadum.org.uk/