After commenting on the Highly critical security bug FAQ page I was expecting some notifications of replies. These never came.

Looking at my mailserver (Exim 4.90.1) I do see mail incoming pointed towards the alias I used to register here, with a sender address that reads bender@btch1.drupal.bak. These mails fail sender verification.

Now, Exim by default does some checks on the sender address (only the remote part, no callout verification), so at a minimum btch1.drupal.bak should resolve to a valid IP-address.
Since it doesn't (AFAICT .bak is not even an official TLD), sender address verification fails and the notification never reaches the intended recipient.

Comments

OliverH created an issue. See original summary.

nnewton’s picture

nnewton CreditAttribution: nnewton commented

Ya, that is clearly wrong. I will bring it up with our developers since the envelope isn't being set correctly.

-N

nnewton’s picture

nnewton CreditAttribution: nnewton commented
Status: Active » Fixed

This should be resolved. Thanks. (Resolved as part of a larger-scale fix for D6 envelope rewriting)

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.