Issue 78979 - Confirmation mail sent to envelope from, not header from
Summary: Confirmation mail sent to envelope from, not header from
Status: CLOSED WONT_FIX
Alias: None
Product: Infrastructure
Classification: Infrastructure
Component: Mailing lists (show other issues)
Version: current
Hardware: All All
: P3 Trivial (vote)
Target Milestone: CEE Consid-future
Assignee: Unknown
QA Contact: issues@www
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-06-28 18:57 UTC by mbayer
Modified: 2009-07-12 19:05 UTC (History)
1 user (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---


Attachments
Confirmation mail sent to envelope from, not header from (77.59 KB, text/plain)
2007-07-09 10:13 UTC, Unknown
no flags Details

Note You need to log in before you can comment on or make changes to this issue.
Description mbayer 2007-06-28 18:57:33 UTC
I tried to unsubscribe from an OOo mailing list using the email address with
that I was subscribed to the list, ooo@example.com (all domain names substituted
according to RfC2606 in order to avoid unsolicited emails).

I got the following automatic message from ezmlm:

| From: dev-digest-help@qa.openoffice.org
| To: martin@example.com
[...]
| To confirm that you would like
|
|   martin@example.com
|
| removed from the dev-digest mailing list, please send an empty reply
| to this address:

Note ezmlm used a completely different address which I didn't use to subscribe,
nor to unsubscribe, as the included original message proves:

| --- Enclosed is a copy of the request I received.
|
| Return-Path: <martin@example.com>
| Date: Thu, 28 Jun 2007 17:45:40 +0200
| From: Martin Bayer <ooo@example.com>
                      ^^^
| To: dev-digest-unsubscribe@qa.openoffice.org

So it seems to me as if ezmlm is using the envelope-from, not the header-from
here (similar to formail when called without the -t option).

This has several usability and privacy impacts:
- Confirmation mail is lost if envelope from is not replyable or not read.
- Confirmation mail can get lost if looked for in the wrong spam filter file.
- Confirmation mail can get lost if sender is on the wrong whitelist.
- Confirmation mail can be delivered to the wrong person.

In order to avoid to be unable to unsubscribe at all, users must use the - more
complicated - syntax dev-unsubscribe-name=example.com@qa.openoffice.org when
using an email address different from the sender or envelope from. This is
likely to be too much for the average user on a "users" mailing list.

Thus, the header from should be used for subscribing to a list. Confirmation
mails should be sent to the header from, not the envelope from or sender.
Comment 1 stx123 2007-07-02 11:50:28 UTC
reassigning to support...
Comment 2 Unknown 2007-07-02 12:24:17 UTC
Hi,

Thank you for contacting CollabNet Customer Support. Based on the information
that has been provided to us, we will initiate our research & provide you an
update as soon as we have adequate information. 

Regards
Raji
Support Operations.
Comment 3 Unknown 2007-07-09 10:12:06 UTC
Hi,

This particular request which you have mentioned has been already implemented in
our future release.I have also attatched a screen shot which will help
you.Please find the attatchment. 

Regards
Raji
Support Operations.
Comment 4 Unknown 2007-07-09 10:13:52 UTC
Created attachment 46639 [details]
Confirmation mail sent to envelope from, not header from
Comment 5 mbayer 2007-07-09 12:16:39 UTC
If I interpret the screenshot you attached without further comment correctly,
you are referring to the Reply-To header of mails sent via the list. I'm
referring to the subscribing/ unsubscribing mechanism via double opt-in/ double
opt-out.

As I already said, the challenge mail for the double opt-in (i.e. the automatic
reply you get when you send a subscribe request to the majordomo software that
manages the list) is sent to the wrong address, namely not the address in the
From header of the original mail. This has nothing to do with options for
additional Reply-To headers in mails to those who are already subscribed to the
list, but with the configuration of the mailing list software: ezmlm should rely
on the address supplied in the From header.
Comment 6 Unknown 2007-07-12 12:26:19 UTC
Hi,

Due to the revamping of the entire Mailing List tools from the next release of
CEE we would be unable to take any more new request for change in functionality
in Ezmlm. As we are moving away from EZMLM to a new Improved Mailing List tool.
Also since the requested feature already exists in the New Tool named DS wherein
we can configure the reply-to to point to the From Address mentioned in the mail. 

Marking this issue as Resolved Later.

Regards
Raji
Support Operations.
Comment 7 mbayer 2007-07-12 12:42:06 UTC
I don't know how to make it any clearer that this issue has nothing to do with
the reply-to header of mails sent via the list.
Comment 8 Unknown 2007-08-01 13:03:44 UTC
Mbayer, 
I would suggest to have a look at http://jobintest1.sclatest.inst.collab.net.
Please note this is a demo box for the new version of CEE. The new tool
Discussion is also present for your benefit. Also since there has been a
complete revamp of the mailing list tool we no longer use EZMLM/QMAIL. I would
suggest playing around with this tool to get an idea of the new subscription
process.
Comment 9 Unknown 2007-08-07 10:34:25 UTC
Mbayer, 
I hope you were able to work with the new Discussion Service tool present in
http://jobintest1.sclatest.inst.collab.net. Which might have given you the idea
on the kind of subscription process been used in the new tool . Please let me
know if you have any queries . If there are no other queries we would like to
close the issue as Resolved Later.

-Jobin.
Comment 10 mbayer 2007-08-08 18:32:20 UTC
mbayer->Jobin Thomas: I tried again with the testing environment (Discussion
Services were offline when I tried before) and everything seems to work well -
for the extend to the problem described in this issue: I could subscribe, post,
and unsubscribe from the mailing list using an arbitrary "From: " header.

Unsubscribing worked without double-opt out, though, which means one simple mail
was sufficient to unsubscribe from the list. But that has nothing to do with
this issue.

BTW, configurable welcome messages (e.g. where the working language is not
English) would be a great idea!

Thanks.
Comment 11 Unknown 2007-08-28 06:31:51 UTC
Based on the comments provided in the issue . I am moving this issue to the
resolved later queue .

Please reopen if necessary .
Comment 12 Unknown 2007-08-28 06:35:31 UTC
Reopening this issue for changing to the correct state
Comment 13 Unknown 2007-08-28 06:36:01 UTC
Moving to resolved later queue 
Comment 14 Unknown 2009-01-19 11:58:28 UTC
CollabNet Support is currently reviewing the issues under Resolved-Later. If the
issues are fixed currently in any of the present CEE releases, then it will be
marked as Resolved-Fixed.

There might be a few issues which might not be in our future roadmaps which
might be closed as Wontfix unless it does not lie under any custom request.
Comment 15 Unknown 2009-01-19 12:05:30 UTC
As you always know,to customize the welcome message that is sent or displayed by
the application. To personalize the format of this message, you can make the
necessary changes to the file listed below.

    * Welcome message - look/www/overrides/templates/messages/Welcome.vm

However customizing welcome messages for each discussion on various languages is
not under our roadmap.Hence marking as Wontfix
Comment 16 mbayer 2009-01-19 12:48:35 UTC
This issue is not about the localization of a welcome message. It is, as the
summary line says, about mails sent to the wrong address. Please see desc1 above
for details.

Reopened.
Comment 17 Unknown 2009-01-23 12:30:38 UTC
Mailing Lists have been replaced by new discussion services , hence these are
the following ways of Unsubscription.

For Account holders

If you are regular subscriber, follow these steps:

   1. On the Project Home page, click Discussions in the left navigation menu.
   2. On the Discussions: Discussions page, click the discussion you want to leave.
   3. On the Discussions: Topic Index page, click My Subscription Settings.
   4. Clear the Subscribed option.
   5. Click Save Changes. You receive an email confirming your action.

For Anonymous subscribers

If you are subscribed to the discussion anonymously, follow these steps:

   1. Send an email message to <alias>-unsubscribe@project.domain, where alias
is the name of the discussion to unsubscribe from.

      For example: dev-unsubscribe@project.domain.

Hence marking it as Wontfix for this will not get fixed in ML.

Regards,
Ramya
Support Operations
Comment 18 Mechtilde 2009-07-12 19:05:33 UTC
wontfix -> closed