Bug#828801: Legitimate mail can contain long lines

Gedalya gedalya at gedalya.net
Tue Jun 28 00:31:16 UTC 2016


Package: exim4-config
Version: 4.87-3

Ref: #797919

I've noticed the recent addition to acl_check_data in conf.d/acl/40_exim4-config_check_data:

  deny    message    = maximum allowed line length is 998 octets, \
                       got $max_received_linelength
          condition  = ${if > {$max_received_linelength}{998}}

I decided to try it out on a server getting some real traffic. It turns out the overwhelming majority of messages hit by this are spam, but not all.

Many legitimate and important messages coming from legitimate sources apparently have long lines. These tend to be non-human-originated messages such as order confirmations and alerts of various kinds.

These are coming from some major email sources such as sendgrid, mailgun, our favorite: GoDaddy, and others, and some from the sender's own network, such as Verizon.

I tested manually against gmail, and they let a long line (1150 octets) right through. Interestingly, Postfix 2.11.3-1 from jessie accepted the long line from the client but broke it into two [0] *after* DKIM as added by opendkim, so the signature was broken. Exim versions prior to 4.87 of course let it through. So in conclusion, we can't assume no legitimate mail will contain long lines, so this is probably not a good default configuration for a mail exchanger receiving mail from all over the wild.

[0] http://www.postfix.org/postconf.5.html#smtp_line_length_limit



More information about the Pkg-exim4-maintainers mailing list