topic Re: Bounce Inbound Email Messages in Alfresco Archive

Bounce Inbound Email Messages

hartjed — Fri, 19 Oct 2012 20:22:58 GMT

Hi,I've finally gotten through the pains of getting inbound email to work, however in the process I have also discovered some alarming info that gets returned to sender when alfresco gets an email but rejects it. For example, when I send an email from an email account that either is not configured

Re: Bounce Inbound Email Messages

mrogers — Fri, 19 Oct 2012 22:19:35 GMT

IP addresses are not secret. That's not something that is normally "secured".

Instead networks are secured by things like firewalls and bridges.

If it is an "internal" IP address then it can't be accessed directly.

Re: Bounce Inbound Email Messages

hartjed — Mon, 22 Oct 2012 16:12:28 GMT

IP addresses are not secret. That's not something that is normally "secured".

Instead networks are secured by things like firewalls and bridges.

If it is an "internal" IP address then it can't be accessed directly.

The issue is that information is being provided that should not and does not need to be revealed. Put your hacker hat on for a minute and you will realize the value of that information. When was the last time you got an email rejected that told you the internal IP address of the mail server? Logging the information is great, even sending an email to the administrator, but why would you want to include that info for anyone and everyone?

Re: Bounce Inbound Email Messages

mrogers — Mon, 22 Oct 2012 16:51:01 GMT

Are you sure the information is comming from alfresco rather than your email infrastructure? If its Alfresco then please raise a JIRA and I'll take a look.

Re: Bounce Inbound Email Messages

mrogers — Tue, 23 Oct 2012 16:26:02 GMT

I don't think its coming from Alfresco. I've got a wire capture in front of me of a failed SMTP message and all that is being sent over the wire is a 554 response (transaction failed) with a single string in the error response. There is nothing about IP addresses.