ports/123468: Postgrey information leak, privacy issue

[Roger Marquis]

>Number:         123468
>Category:       ports
>Synopsis:       Postgrey information leak, privacy issue
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue May 06 16:10:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Roger Marquis
>Release:        6.2-REL
>Organization:
>Environment:
6.2-RELEASE amd-64
>Description:
The postgrey application inserts a referral URL into transient (451) reject messages which identifies the recipient domain (%r) to the URL basename postgrey.schweikert.ch.  This is an undocumented privacy issue.
>How-To-Repeat:
cd /usr/ports/mail/postgrey
make install

>Fix:
--- /dev/null   2008-05-06 08:31:56.000000000 -0700
+++ /usr/local/sbin/postgrey    2008-05-06 08:32:11.000000000 -0700
@@ -579,7 +579,7 @@
                     $opt{'auto-whitelist-clients'} : 5) : 5,
             retry_window     => $retry_window,
             greylist_action  => $opt{'greylist-action'} || 'DEFER_IF_PERMIT',
-            greylist_text    => $opt{'greylist-text'} || 'Greylisted, see http://postgrey.schweikert.ch/help/%r.html',
+            greylist_text    => $opt{'greylist-text'} || 'Greylisted, see http://postgrey.schweikert.ch/help/',
             whitelist_clients_files    => $opt{'whitelist-clients'} ||
                 [ "$CONFIG_DIR/postgrey_whitelist_clients" ,
                   "$CONFIG_DIR/postgrey_whitelist_clients.local" ],


>Release-Note:
>Audit-Trail:
>Unformatted: