ports/143671: ssmtp not correctly rewriting "To:"

[Thomas Schweikle]

>Number:         143671
>Category:       ports
>Synopsis:       ssmtp not correctly rewriting "To:"
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Feb 08 13:20:09 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Thomas Schweikle
>Release:        FreeBSD 9.0-CURRENT
>Organization:
private
>Environment:
FreeBSD yum.tps 9.0-CURRENT FreeBSD 9.0-CURRENT #78: Mon Feb 8 00:29:39 CET 2010   screen at yum.tps:/usr/obj/usr/src/sys/YUM  i386
>Description:
  ssmtp does not replace the "From" with what is given
  by the configuration file. If I define "root=tps at vr-web.de"
  all mail for user-id beyond 1000 shall go to user
  "tps at vr-web.de". But instead I find all mail for
  users beyond 1000 going to "root at vr-web.de" this
  clearly wrong.
  Here is my ssmtp.conf:
    root=tps at vr-web.de
    mailhub=mail.vr-web.de
    rewritedomain=vr-web.de
    FromLineOverride=NO
    UseTLS=yes
    UseSTARTTLS=yes
    AuthUser=xxx
    AuthPass=xxx
    AuthMethod=AUTH-PLAIN
  
  Sending mail to "root" on localhost gives:
    Delivered-To: tps at localmail-ka.vrweb.de
    Return-Path: <root at vr-web.de>
    Received: from mx0.vr-web.de
      (vrwf103.vrweb.de [::ffff:192.168.27.6])
      by loc.vr-web.de with esmtp;
      Mon, 08 Feb 2010 13:30:32 +0100
      id 00057D64.4B7003E8.0000205D
    Received: from sen.tps
      (dslb-084-056-101-235.pools.arcor-ip.net
      [::ffff:84.56.101.235])
      (QVVUSDogTE9HSU4gdHBzLCBUTFM6IFRMU3Y
      L1NTTHYzLDI1NmJpdHMsQUVTMjU2LVNIQQ==)
    by mx0.vr-web.de with esmtp;
      Mon, 08 Feb 2010 13:30:56 +0100
      id 0004FB1C.4B700400.00004118
    Received: by sen.tps (sSMTP sendmail emulation);
      Mon, 08 Feb 2010 13:30:28 +0100
    From: "Charlie &" <root at vr-web.de>
    Date: Mon, 08 Feb 2010 13:30:28 +0100
    To: root at vr-web.de
    Subject: test

    test


  I would expect the header to be:
    Delivered-To: tps at localmail-ka.vrweb.de
    Return-Path: <tps at vr-web.de>
    Received: from mx0.vr-web.de
      (vrwf103.vrweb.de [::ffff:192.168.27.6])
      by loc.vr-web.de with esmtp;
      Mon, 08 Feb 2010 13:30:32 +0100
      id 00057D64.4B7003E8.0000205D
    Received: from sen.tps
      (dslb-084-056-101-235.pools.arcor-ip.net
      [::ffff:84.56.101.235])
      (QVVUSDogTE9HSU4gdHBzLCBUTFM6IFRMU3Y
      L1NTTHYzLDI1NmJpdHMsQUVTMjU2LVNIQQ==)
    by mx0.vr-web.de with esmtp;
      Mon, 08 Feb 2010 13:30:56 +0100
      id 0004FB1C.4B700400.00004118
    Received: by sen.tps (sSMTP sendmail emulation);
      Mon, 08 Feb 2010 13:30:28 +0100
    From: "Charlie &" <root at vr-web.de>
    Date: Mon, 08 Feb 2010 13:30:28 +0100
    To: tps at vr-web.de
    Subject: test

    test


  It is just some special configuration at my providers
  site making the mail being send to me not to the real
  "root at vr-web.de". ssmtp failing to rewrite "To:"
  correctly will, if not special precautions where done
  mail had been gone to my providers "root"-address. Not
  what was intended!

  I suggest replacing "To:" correctly with what is
  configured in the configuration file. I could find
  this with ssmtp on

  Debian GNU/Linux experimental, testing, stable
  FreeBSD 5, 6, 7, 8, HEAD
  Ubuntu 9.04, 9.10, 10.04

  for me it looks like ssmtp is badly broken at the time
  being!

>How-To-Repeat:
Configure ssmtp, then send mail. Sniff what is send or have a look at this mail with some intermediate mta.
>Fix:
Rewrite "To:" as given in configuration file.

>Release-Note:
>Audit-Trail:
>Unformatted: