[imp] Invalid "To:" field problem

[Rick Stevens]

Michael M Slusarz wrote:
> Quoting Todd Aiken <taiken@ubishops.ca>:
> 
> | Had a user today complain that immediately after logging into IMP, he 
> | would get a "This page cannot be displayed" message from his web 
> | browser.  Traced it down to a SPAM mesage in his INBOX with the 
> | following invalid "To:" field:
> | 
> | To: "@cs.com" <@cs.com>
> | 
> | Our IMAP server is able to handle this message, as I was able to move 
> | it to my INBOX and view it via my IMAP connection in Pegasus Mail, 
> | but IMP doesn't like it.  If I add something to the beginning of the 
> | domain name before the @ sign, such as <test@cs.com>, IMP then 
> | accepts it.  
> 
> I can't replicate this behavior.  I know that Jan just committed some 
> patches to silence some IMAP errors so this may have solved this issue.

Are you certain there's no unprintable character before the "@"
(e.g., a control character)?  The Klez virus does stuff like that,
the most common having the Return-Path: line contain "<CTRL-Ag>"
(CTRL-A being a hex 1 or SOH character).
----------------------------------------------------------------------
- Rick Stevens, SSE, VitalStream, Inc.      rstevens@vitalstream.com -
- 949-743-2010 (Voice)                    http://www.vitalstream.com -
-                                                                    -
-     Veni, Vidi, VISA:  I came, I saw, I did a little shopping.     -
----------------------------------------------------------------------