Subject: | Re: Email::ARF:Report and report From: |
Date: | Thu, 10 Feb 2011 11:17:48 -0500 |
To: | Ricardo Signes <rjbs [...] cpan.org> |
From: | "Brian J. Murrell" <brian [...] interlinx.bc.ca> |
On Thu, 2011-02-10 at 10:58 -0500, Ricardo Signes wrote:
Show quoted text
>
> ...and you say the spam has unix line endings.
Eeek! Yeah. The problem here is that I was processing a message I
"saved" from my MUA, when in fact my production use of this will be
processing e-mails directly. So I have reverted to testing with a
verbatim copy of an e-mail (which is CRLF terminated already) rather
than a saved-from-MUA copy.
And now the e-mail in the second mime part looks as I would expect. For
completeness, here's my reproducer script:
#! /usr/bin/perl
use Email::ARF::Report;
@spam = <STDIN>;
$fields{'Source-IP'} = "1.2.3.4";
$fields{'Feedback-Type'} = "abuse";
$description = "This is an abuse report in ARF format.";
my $report = Email::ARF::Report->create(
original_email => join('', @spam),
description => $description,
fields => \%fields,
);
print $report->as_string;
And here's what it produces:
Date: Thu, 10 Feb 2011 11:13:54 -0500
MIME-Version: 1.0
Content-Type: multipart/report; boundary="1297354434.38DA400.16031"; report-type="feedback-report"
--1297354434.38DA400.16031
MIME-Version: 1.0
Content-Type: text/plain
This is an abuse report in ARF format.
--1297354434.38DA400.16031
MIME-Version: 1.0
Content-Type: message/feedback-report
Feedback-Type: abuse^M
Source-IP: 1.2.3.4^M
User-Agent: Email::ARF::Report/0.005^M
Version: 0.1^M
--1297354434.38DA400.16031
MIME-Version: 1.0
Content-Type: message/rfc822
Return-Path: <info@telenet.be>^M
Received: from murder ([unix socket])^M
by linux.interlinx.bc.ca (Cyrus v2.2.13-Debian-2.2.13-19) with LMTPA;^M
Thu, 10 Feb 2011 03:29:34 -0500^M
X-Sieve: CMU Sieve 2.2^M
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on^M
linux.interlinx.bc.ca^M
X-Spam-Flag: YES^M
...
<FONT face="Calibri"><B> </B></FONT></DIV>^M
<DIV>^M
<FONT face="Calibri"><B> </B></FONT></DIV>^M
</FONT>^M
</BODY></HTML>^M
^M
^M
--1297354434.38DA400.16031--
Lines ending in ^M are the properly terminated CRLF lines. Lines
without only have 0x0a terminations.
Show quoted text> Okay. I'll have a look at
> this, but definitely not before lunch and only maybe today.
Sure. Thanx!
b.
Message body not shown because it is not plain text.