ietf-822
[Top] [All Lists]

Re: RFC validation samples?

2004-08-06 17:44:01

On Aug 06 2004, Bruce Lilly wrote:

"from", "by", "with", "via", "id", and "for" are protocol elements

<snip>

That's more information than I was expecting, but you've nicely
cleared up areas of discrepancy between RFCs, thanks.

My question was intended to address parsing the Microsoft non-RFC
format specifically, since it's likely to be needed for data mining
some Received: lines. The example you gave strongly suggests to me
whoever programmed that line used code resembling

fprintf(out, "Received: from %s by %s with %s; %s\r\n", ...);

Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
         Mon, 14 Jun 2004 16:13:25 -0700

Which is why I asked if Microsoft's format seems to consistently use "from"
"by" "with" as delimiters (because we can't rely on white space obviously).
I also wouldn't be surprised if the Microsoft date/time stamp is localized,
and shows up e.g. in German for servers installed in German locales (?).

The illegal syntax is generated by Microsoft Windows 2000 (and
probably its successors) and was reported to Microsoft years ago
(shortly after Windows 2000 was introduced).  As of Windows 2000
SP3 it was not fixed, so I suppose one could say that the bug
responsible for the broken format is stable...

I'm not surprised. Now, I wouldn't expect anyone on this list to have a
Windows 2000 SMTP server on their premises ;-) but hypothetically if
someone had access to the binary or dll, it may be possible to run strings(1)
on it and look for the actual format line used, assuming that line is
really generated in such a simple way.


-- 
Laird Breyer.


<Prev in Thread] Current Thread [Next in Thread>