Koozali.org: home of the SME Server

User Vacation Message

Offline brainamess

  • *
  • 39
  • +0/-0
User Vacation Message
« on: April 02, 2018, 07:11:01 PM »
Good day!

I have an issue where I have turned on vacation message but for some reason when the auto message is sent outside our domain it's broken:

Subject:   Re:Auto Reply
Date:   2 Apr 2018 13:05:19 -0400
From:   User@domain.com
To:   srs0=cdhtnb=gx=gmail.com=bri.amesse@domain.com

What makes it become:
srs0=cdhtnb=gx=gmail.com=bri.amesse@domain.com

Is there a way to fix this issue? As the messages don't get sent out.

Brian

Offline Jean-Philippe Pialasse

  • *
  • 2,763
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: User Vacation Message
« Reply #1 on: April 02, 2018, 07:31:46 PM »
Well only guessing here as we have only partial and onfuscated info : how the original mail delivered? Is it via a fetchmail, getmail mechanism or any mail transfer / mailing list to this account?

My guess would be for the last one, and the email conversion is to allow to get around the dkim check by using the domain of the transfering box.

If so the vacation message should be set on the original box.


 The
« Last Edit: April 02, 2018, 07:47:13 PM by Jean-Philippe Pialasse »

Offline brainamess

  • *
  • 39
  • +0/-0
Re: User Vacation Message
« Reply #2 on: April 02, 2018, 07:53:48 PM »
Thanks for the response.

From what I gather it is actually delivered via fetchmail.

I will show the whole source of the sent mail from my gmail:

From - Mon Apr  2 13:49:59 2018
X-Account-Key: account1
X-UIDL: 1522691412.2994.vmsme
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <SRS0=CDhTNb=GX=gmail.com=bri.amesse@epls.ca>
Delivered-To: 107b@vmsme.epls.ca
Received: (qmail 2966 invoked by alias); 2 Apr 2018 17:50:10 -0000
Delivered-To: alias-localdelivery-107b@epls.ca
Received: (qmail 2949 invoked by uid 453); 2 Apr 2018 17:50:09 -0000
X-Virus-Checked: by ClamAV 0.99.3 on epls.ca
X-Virus-Found: No
X-HELO: vmsme.epls.ca
Authentication-Results: epls.ca; auth=none
Received: from Unknown (HELO vmsme.epls.ca) (127.0.0.200)
 by epls.ca (qpsmtpd/0.96) with ESMTP ; Mon, 02 Apr 2018 13:50:09 -0400
Delivered-To: mbox@epls.ca
Received: from mail.epls.ca
        by vmsme.epls.ca with POP3 (fetchmail-6.3.17)
        for <jlaflamme@epls.ca> (multi-drop); Mon, 02 Apr 2018 13:50:09 -0400 (EDT)
Received: from s029.panelboxmanager.com
        by s029.panelboxmanager.com with LMTP id sNvtCHhswlqh+A4ATBtR6w
        for <mbox@epls.ca>; Mon, 02 Apr 2018 13:46:32 -0400
Return-path: <SRS0=CDhTNb=GX=gmail.com=bri.amesse@epls.ca>
Envelope-to: jlaflamme@epls.ca
Delivery-date: Mon, 02 Apr 2018 13:46:32 -0400
Received: from mail-oi0-f49.google.com ([209.85.218.49]:39095)
        by s029.panelboxmanager.com with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
        (Exim 4.89_1)
        (envelope-from <bri.amesse@gmail.com>)
        id 1f33XL-0047Ww-As
        for jlaflamme@epls.ca; Mon, 02 Apr 2018 13:46:31 -0400
Received: by mail-oi0-f49.google.com with SMTP id q71-v6so13555078oic.6
        for <jlaflamme@epls.ca>; Mon, 02 Apr 2018 10:46:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:from:date:message-id:subject:to;
        bh=Ev3Z9CWWaleaIzZw4yi9Ea1zF+GDcn/16zVmqpOR/i8=;
        b=axLnOtwYky7vQYmz9dHEHpw/OwpeC7dDgt3yJsYAzDhH/jL9DlUMOVHkc+eKclBcBY
         Gl+BltByEULvLZcc9z4ywq1oXHgBbwwMJF1OlidKMyUXV6jO9eU0U6oE/bzCteN3nCFS
         ncsQN954m2p9DqyFniVAWbKagtKk2lbhbk2t61cqWkIkkdbr+P3kTX14NpKJPjFZN1b3
         X5+IY2jy0QgJOEAAttnMl8b3AHQaBzzCt5U3Fq6AseW7bjHzCUOlE0oMJQ8USlqDLXjj
         C/20q9GJj5SDnnimArh+e33GLuGBdTjx1GQv+wVhAsoNLS7hPCpdI4hAbQwAlIPCsXHX
         BysA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
        bh=Ev3Z9CWWaleaIzZw4yi9Ea1zF+GDcn/16zVmqpOR/i8=;
        b=d/J9R7pt9Fo+Eta5fn/yE2/3XBLL40y4Pr69JFO4RotvRvKxqICwH7B1xf/KkfJ7At
         Ng7XFYse+QEEx1Q56ZbUmHALb7qC2ljfJ5A1FetP40uUdcxJ/idpde+wM4PlxiiYdOxZ
         SMbdZTw/Uxf55neAiPnSWNECgKahekp6mRpl3Ory9hmeOonc23w9cD4IbRqdc5Z3OOo8
         lqKR/fEgwzg/Ghvli/nIF0DG/qwEc/S556RCsfIKK6sOKSMLydYnyYmlYs1l4cA8JevW
         QBtl+eLzHYDA4S3LDsa4XSBu7tqg0iR3C6/8WiCQO/kX13zB1vx4jmDL82ehTu1y/Ecw
         hmZQ==
X-Gm-Message-State: ALQs6tDPJElk31Crs2JT4Rr6GyLXqNAU5G2GPOMbq6YKbeTpS9oCcPBh
        w31HiY/6fn+Y8zPzeJBgnttJdSFP9VVesWxCcuSK4g==
X-Google-Smtp-Source: AIpwx4+F25cKDbiTWvkFOgom3BklcoZ/SZYrOmybX3iaxhPNbJU2AGjB5uUQoW0g79ZDd9JvnyukmNSNixBkqyW6+pY=
X-Received: by 2002:aca:5cd7:: with SMTP id q206-v6mr5365117oib.154.1522691190297;
 Mon, 02 Apr 2018 10:46:30 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a9d:2be3:0:0:0:0:0 with HTTP; Mon, 2 Apr 2018 10:46:29 -0700 (PDT)
From: Brain Amess <bri.amesse@gmail.com>
Date: Mon, 2 Apr 2018 13:46:29 -0400
Message-ID: <CAK2TUQfkecJ8PaOKcXm4aEYWzUq1KrKaKbXq5H0rPYNiyRSswg@mail.gmail.com>
Subject: test
To: Joby Laflamme <jlaflamme@epls.ca>
Content-Type: multipart/alternative; boundary="000000000000801b010568e12b78"
X-Spam-Status: No, score=-2.0
X-Spam-Score: -19
X-Spam-Bar: --
X-Ham-Report: Spam detection software, running on the system "s029.panelboxmanager.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
  Content preview:  test test [...]
  Content analysis details:   (-2.0 points, 10.0 required)
   pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at http://www.dnswl.org/, no
                             trust
                             [209.85.218.49 listed in list.dnswl.org]
 -0.0 RCVD_IN_MSPIKE_H3      RBL: Good reputation (+3)
                             [209.85.218.49 listed in wl.mailspike.net]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                             (bri.amesse[at]gmail.com)
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                             [score: 0.0000]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
 -0.0 RCVD_IN_MSPIKE_WL      Mailspike good senders
X-Spam-Flag: NO
X-Antivirus: Avast (VPS 180402-0, 04/02/2018), Inbound message
X-Antivirus-Status: Clean

--000000000000801b010568e12b78
Content-Type: text/plain; charset="UTF-8"

test

--000000000000801b010568e12b78
Content-Type: text/html; charset="UTF-8"

<div dir="ltr">test</div>

--000000000000801b010568e12b78--


and then the responded email:


From - Mon Apr  2 13:49:59 2018
X-Account-Key: account1
X-UIDL: 1522691411.2990.vmsme
X-Mozilla-Status: 0011
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <jlaflamme@epls.ca>
Delivered-To: 107b@vmsme.epls.ca
Received: (qmail 2956 invoked by alias); 2 Apr 2018 17:50:10 -0000
Delivered-To: alias-localdelivery-107b@epls.ca
Received: (qmail 2910 invoked by alias); 2 Apr 2018 17:50:07 -0000
Delivered-To: srs0=dyt/vi=gx=mail157.atl121.mcsv.net=bounce-mc.us13_54790769.232673-joby.laflamme=everypoint.ca@vmsme.epls.ca
Received: (qmail 2893 invoked by alias); 2 Apr 2018 17:50:06 -0000
Delivered-To: alias-localdelivery-srs0=dyt/vi=gx=mail157.atl121.mcsv.net=bounce-mc.us13_54790769.232673-joby.laflamme=everypoint.ca@everypoint.ca
Received: (qmail 2878 invoked by uid 5043); 2 Apr 2018 17:50:05 -0000
Message-ID: <20180402175005.2875.qmail@epls.ca>
Date: 2 Apr 2018 13:50:05 -0400
To: srs0=dyt/vi=gx=mail157.atl121.mcsv.net=bounce-mc.us13_54790769.232673-joby.laflamme=everypoint.ca@everypoint.ca
Precedence: junk
Content-Type: text/plain; charset="UTF-8"
From: Joby Laflamme <joby.laflamme@everypoint.ca>
Subject: Re:Auto Reply
X-Antivirus: Avast (VPS 180402-0, 04/02/2018), Inbound message
X-Antivirus-Status: Clean

Thank you for your email. I will be out of the office today Monday April 2nd. If you need immediate assistance, please call 514-426-3043. All of my emails will be responded to by our operations department.

For immediate response, please contact Kelly; kelly@everypoint.ca


Thank you,



I am not sure why it breaks the way it does :)

Offline brainamess

  • *
  • 39
  • +0/-0
Re: User Vacation Message
« Reply #3 on: April 02, 2018, 08:11:47 PM »
It seems to me the return path:

Return-path: <SRS0=CDhTNb=GX=gmail.com=bri.amesse@epls.ca>

Is what is creating the issue.

As for why it is read like that, I would love to figure out.

Brian


Offline Jean-Philippe Pialasse

  • *
  • 2,763
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: User Vacation Message
« Reply #4 on: April 03, 2018, 02:38:57 AM »
this is because of https://en.wikipedia.org/wiki/Sender_Rewriting_Scheme
I thought only From should be reencoded, but it seems that it happens also on Return-Path.

Then vacation should recreate the original email. I found http://search.cpan.org/~shevek/Mail-SRS-0.31/lib/Mail/SRS.pm but was not able to get it working to reverse the string to regular email, which  seems to be bri.amesse@gmail.com




EDIT:
- the Return-Path has been added by qpsmtpd (print MF "Return-Path: ", $transaction->sender->format , "\n";) but this seems that your message has traveled quite a few, can you explain the part you know / have access to?

From the list of transaction the first one acting on the header is the Exim box "s029.panelboxmanager.com", which reencode the return-path without it to be needed. Can you act there ?

Received: by mail-oi0-f49.google.com with SMTP id q71-v6so13555078oic.6
        for <jlaflamme@epls.ca>; Mon, 02 Apr 2018 10:46:31 -0700 (PDT)
Received: from mail-oi0-f49.google.com ([209.85.218.49]:39095)
        by s029.panelboxmanager.com with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
        (Exim 4.89_1)
        (envelope-from <bri.amesse@gmail.com>)

added for the first time :
Return-path: <SRS0=CDhTNb=GX=gmail.com=bri.amesse@epls.ca>
Envelope-to: jlaflamme@epls.ca
Delivery-date: Mon, 02 Apr 2018 13:46:32 -0400


Received: from s029.panelboxmanager.com
        by s029.panelboxmanager.com with LMTP id sNvtCHhswlqh+A4ATBtR6w
        for <mbox@epls.ca>; Mon, 02 Apr 2018 13:46:32 -0400
Received: from mail.epls.ca
        by vmsme.epls.ca with POP3 (fetchmail-6.3.17)
        for <jlaflamme@epls.ca> (multi-drop); Mon, 02 Apr 2018 13:50:09 -0400 (EDT)
Received: from Unknown (HELO vmsme.epls.ca) (127.0.0.200)
 by epls.ca (qpsmtpd/0.96) with ESMTP ; Mon, 02 Apr 2018 13:50:09 -0400
Received: (qmail 2949 invoked by uid 453); 2 Apr 2018 17:50:09 -0000
Received: (qmail 2966 invoked by alias); 2 Apr 2018 17:50:10 -0000

Delivered-To: 107b@vmsme.epls.ca
Return-Path: <SRS0=CDhTNb=GX=gmail.com=bri.amesse@epls.ca>
« Last Edit: April 03, 2018, 04:21:23 AM by Jean-Philippe Pialasse »

Offline Jean-Philippe Pialasse

  • *
  • 2,763
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: User Vacation Message
« Reply #5 on: April 03, 2018, 05:54:22 AM »
see https://www.libsrs2.org/srs/srs.pdf

the issue is not the return path but rather a misconfiguration in term of DNS or on one of your SMTP servers (likely  s029.panelboxmanager.com).

Return-path: <SRS0=CDhTNb=GX=gmail.com=bri.amesse@epls.ca> is correct.
epls.ca should be handled by s029.panelboxmanager.com as this is the one which added the header. It is the one able to match the orginal sender and with its own hash to see if the bounce / vacation message is legitimate.

so if you think that this is not right this is likely that your received a bounce, because epls.ca is configured to point to your sme vmsme.epls.ca  which does not know anything about this SRS.

Offline brainamess

  • *
  • 39
  • +0/-0
Re: User Vacation Message
« Reply #6 on: April 03, 2018, 01:58:42 PM »
The point where it messed up seems to be exactly there and I am taking care of it :)

Thank you so much for your help.

I will let you know what happens!

Brian