Closed Bug 1559826 Opened 7 years ago Closed 5 years ago

Needs a way to block email with malformed dates, such as 12/20/00. These get through my mail filters.

Categories

(Thunderbird :: Filters, defect)

defect
Not set
normal

Tracking

(Not tracked)

RESOLVED INVALID

People

(Reporter: gdickinson, Unassigned)

Details

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0

Steps to reproduce:

Nothing I can do. The features suggested to fix the issue do not exist in Thunderbird. The only that helps is to convert convert all inbound email to text so that at least any attachment can't auto execute, turn off preview, and sort by date arrived to identify the spam. Almost all the time, they show up in the top of the listed email.

Actual results:

Spam, with and without attachments, get through.

Expected results:

Malformed dates should have been blocked.

I have one other suggestion. Thunderbird needs to contain a feature that allows users to create lists of allowed senders. If enabled, it could pre-filter email before the actual mail filters begin analysis of arrived email.

I built a text based email filter that pre-filtered inbound mail traffic before the primary UTM Gateway even saw it. It looked for non-printable characters, consulted a countries list and blocked email based on country of origin. The filter existed as a script in a firewall running pF-Sense that acted as to network front door and it was VERY effective. Something of this nature should be possible in Thunderbird without allot of overhead.

There are at a minimum 300 million + users in the US and half of them don't have a clue how to protect themselves. Help'em out.

Group: mail-core-security
Component: Untriaged → Filters
Summary: 1.There needs to be a way to block email with malformed dates, such as 12/20/00. These get through my mail filters. 2. Need a way to disable attached emails from executing embedded script code. → Needs a way to block email with malformed dates, such as 12/20/00. These get through my mail filters.

This is not very clear. Can you provide a sample mail (save as .eml file, attach to bug using "Attach File" above) and tell us exactly which filter doesn't work.

(In reply to Jorg K (CEST = GMT+2) from comment #3)

This is not very clear. Can you provide a sample mail (save as .eml file, attach to bug using "Attach File" above) and tell us exactly which filter doesn't work.

Gerald, can you supply a testcase?

Flags: needinfo?(gdickinson)
Keywords: testcase-wanted
Whiteboard: [spam]

My apologies. Unfortunately, I can not provide an actual example. Spamassassin seems to have fixed the issue and I have not had any of these messages with wrong or mal-formed dated in some time now. If you wish, you may close the bug.

But just for your info, I had some spam emails come in, that did not get filtered by bogofilter, with date stamps where the month was the wrong month, say 01 instead of actually 09 and, the year was 26 instead of 19. For example, 01/24/26. Often these spam emails had high ascii characters embedded in the text of the comment as field that offered to sell me some "interesting enhancements". They just looked odd so I never opened them. My rule of thumb is "when in doubt, don't". Not much more I can tell you. Anyway, I'm a big fan of Spamassassin now.

Thank you for checking back with me. It is appreciated.
Be well,

Flags: needinfo?(gdickinson)
Status: UNCONFIRMED → RESOLVED
Closed: 5 years ago
Keywords: testcase-wanted
Resolution: --- → INVALID
Whiteboard: [spam]
You need to log in before you can comment on or make changes to this bug.