<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">
<!--
p
        {margin-top:0;
        margin-bottom:0}
-->
P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">Hey all,<br>
<br>
I have confirmed with my engineers that this was a custom rule that was set to assist some domains with catchall@ mailbox using a pop connector to add the X-Envelope-To field so the pop connector can ascertain which user to assign the mail to. I have been told
 this has been removed and should be functioning as per normal now.<br>
<br>
Any issues let me know.<br>
<br>
Regards,<br>
Krystin Dix<br>
<div style="font-family:Times New Roman; color:#000000; font-size:16px">
<hr tabindex="-1">
<div id="divRpF384652" style="direction:ltr"><font color="#000000" face="Tahoma" size="2"><b>From:</b> plug [plug-bounces@plug.org.au] on behalf of Leon Wright [techman83@gmail.com]<br>
<b>Sent:</b> Thursday, 27 February 2014 11:36 AM<br>
<b>To:</b> Steve Boak<br>
<b>Cc:</b> plug@plug.org.au<br>
<b>Subject:</b> Re: [plug] PLUG headers revealing email addresses<br>
</font><br>
</div>
<div></div>
<div>
<div dir="ltr">Nice work investigating this James/Krystin. Keep us posted on how it pans out. If the mailing list needs some tweaking to avoid it occurring, I'll discuss it with the admin team.
<div><br>
</div>
<div>Leon</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>--<br>
DRM 'manages access' in the same way that jail 'manages freedom.'<br>
<br>
# cat /dev/mem | strings | grep -i cats<br>
Damn, my RAM is full of cats... MEOW!!</div>
<br>
<br>
<div class="gmail_quote">On Wed, Feb 26, 2014 at 10:13 PM, Steve Boak <span dir="ltr">
<<a href="mailto:sboak@westnet.com.au" target="_blank">sboak@westnet.com.au</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div class="">On 26/02/14 20:16, Krystin Dix wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
Hey Steve,<br>
<br>
I will pass this on to the guys responsible and see what they say. (I currently work for iiNet / Westnet Hosting).<br>
<br>
It is interesting to see that it is done this way. If you wouldn't mind forwarding me off list the exact headers received to
<a href="mailto:kdix@staff.iinet.net.au" target="_blank">kdix@staff.iinet.net.au</a> and I will come back here with a response.<br>
</blockquote>
<br>
</div>
Done
<div class="HOEnZb">
<div class="h5"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
Thanks<br>
Krystin Dix<br>
<br>
-----Original Message-----<br>
From: plug [mailto:<a href="mailto:plug-bounces@plug.org.au" target="_blank">plug-bounces@plug.org.<u></u>au</a>] On Behalf Of Steve Boak<br>
Sent: Wednesday, February 26, 2014 6:58 PM<br>
To: <a href="mailto:plug@plug.org.au" target="_blank">plug@plug.org.au</a><br>
Subject: Re: [plug] PLUG headers revealing email addresses<br>
<br>
On 26/02/14 14:37, James Henstridge wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
On Mon, Feb 24, 2014 at 9:36 AM, Steve Boak <<a href="mailto:sboak@westnet.com.au" target="_blank">sboak@westnet.com.au</a>> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
Hi<br>
<br>
I just happened to be looking through the source of a plug list<br>
message and saw this in the headers (and yes, my address  is one of<br>
them)<br>
<br>
X-Envelope-To: <a href="mailto:bxxx@westnet.com.au" target="_blank">bxxx@westnet.com.au</a>,
<a href="mailto:bxxx@westnet.com.au" target="_blank">bxxx@westnet.com.au</a>,<br>
<a href="mailto:cxxx@westnet.com.au" target="_blank">cxxx@westnet.com.au</a>,<br>
   <a href="mailto:gxxx@westnet.com.au" target="_blank">gxxx@westnet.com.au</a>, <a href="mailto:gxxx@westnet.com.au" target="_blank">
gxxx@westnet.com.au</a>, <a href="mailto:jxxx@westnet.com.au" target="_blank">jxxx@westnet.com.au</a>,<br>
   <a href="mailto:mxxx@westnet.com.au" target="_blank">mxxx@westnet.com.au</a>, <a href="mailto:mxxx@westnet.com.au" target="_blank">
mxxx@westnet.com.au</a>, <a href="mailto:nxxx@westnet.com.au" target="_blank">nxxx@westnet.com.au</a>,<br>
   <a href="mailto:rxxx@westnet.com.au" target="_blank">rxxx@westnet.com.au</a>, <a href="mailto:sxxx@westnet.com.au" target="_blank">
sxxx@westnet.com.au</a>, <a href="mailto:vxxx@westnet.com.au" target="_blank">vxxx@westnet.com.au</a>,<br>
   <a href="mailto:wxxx@westnet.com.au" target="_blank">wxxx@westnet.com.au</a><br>
<br>
I've anonymised them of course, but interesting to note that it's<br>
only westnet addresses showing up here. Is this an artefact of the<br>
way the list mailer groups it's send list?<br>
<br>
Can these be hidden in some way, or is that just the way the list works?<br>
</blockquote>
Hi Steve,<br>
<br>
I don't see that header in any of the PLUG messages in my archive.<br>
Given that the addresses you've listed are all @<a href="http://westnet.com.au" target="_blank">westnet.com.au</a>, is it<br>
possible that the header is being added by your ISP?  The ordering of<br>
the header relative to the "Received" headers might give a clue about<br>
whether this is the case.<br>
<br>
When sending bulk mail (such as mailing list traffic), it isn't<br>
uncommon to group the delivery in this way to cut down on traffic.<br>
There may be an option in mailman to deliver messages independently,<br>
but it is really the ISP that is leaking the information to you.<br>
<br>
James.<br>
</blockquote>
Hi James<br>
<br>
The adding of the X-Envelope-To header with multiple westnet addresses started on the 1st of February (this year), and every email I have received directly from the plug list since then has it. Emails which are addressed to me and cc'ed to the plug list (such
 as your email above) don't, even though they are delivered to the same addresses.<br>
<br>
Thanks for the tip about the ordering of headers - the extract below seems to indicate that it is iinet's mail server at fault.<br>
<br>
X-IronPort-AV: E=Sophos;i="4.97,527,<u></u>1389715200"; d="scan'208";a="185453217"<br>
X-Envelope-To: <a href="mailto:bxxx@westnet.com.au" target="_blank">bxxx@westnet.com.au</a>,
<a href="mailto:bxxx@westnet.com.au" target="_blank">bxxx@westnet.com.au</a>, <a href="mailto:cxxx@westnet.com.au" target="_blank">
cxxx@westnet.com.au</a>, <a href="mailto:gxxx@westnet.com.au" target="_blank">gxxx@westnet.com.au</a>,
<a href="mailto:gxxx@westnet.com.au" target="_blank">gxxx@westnet.com.au</a>, <a href="mailto:jxxx@westnet.com.au" target="_blank">
jxxx@westnet.com.au</a>, <a href="mailto:mxxx@westnet.com.au" target="_blank">mxxx@westnet.com.au</a>,
<a href="mailto:mxxx@westnet.com.au" target="_blank">mxxx@westnet.com.au</a>, <a href="mailto:nxxx@westnet.com.au" target="_blank">
nxxx@westnet.com.au</a>, <a href="mailto:rxxx@westnet.com.au" target="_blank">rxxx@westnet.com.au</a>,
<a href="mailto:sxxx@westnet.com.au" target="_blank">sxxx@westnet.com.au</a>, <a href="mailto:vxxx@westnet.com.au" target="_blank">
vxxx@westnet.com.au</a>, <a href="mailto:wxxx@westnet.com.au" target="_blank">wxxx@westnet.com.au</a><br>
Received: from unknown (HELO <a href="http://power.plug.org.au" target="_blank">power.plug.org.au</a>) ([54.252.97.56]) by
<a href="http://icp-osb-irony-in14.iinet.net.au" target="_blank">icp-osb-irony-in14.iinet.net.<u></u>au</a> with ESMTP; 23 Feb 2014 10:51:27 +0800<br>
Received: from <a href="http://power.plug.org.au" target="_blank">power.plug.org.au</a> (localhost [IPv6:::1]) by
<a href="http://power.plug.org.au" target="_blank">power.plug.org.au</a> (Postfix) with ESMTP id 9D0965D489; Sun, 23 Feb 2014<br>
02:54:04 +0000 (UTC)<br>
X-Original-To: <a href="mailto:plug@plug.org.au" target="_blank">plug@plug.org.au</a><br>
<br>
I'll approach Westnet for an explanation.<br>
<br>
Steve<br>
<br>
______________________________<u></u>_________________<br>
PLUG discussion list: <a href="mailto:plug@plug.org.au" target="_blank">plug@plug.org.au</a><br>
<a href="http://lists.plug.org.au/mailman/listinfo/plug" target="_blank">http://lists.plug.org.au/<u></u>mailman/listinfo/plug</a><br>
Committee e-mail: <a href="mailto:committee@plug.org.au" target="_blank">committee@plug.org.au</a><br>
PLUG Membership: <a href="http://www.plug.org.au/membership" target="_blank">http://www.plug.org.au/<u></u>membership</a><br>
</blockquote>
<br>
<br>
</div>
</div>
<div class="im HOEnZb">-- <br>
Steve Boak, (08) 9756 0662, P.O. Box 240, Nannup, WA 6275<br>
Engin VOIP number (08) 6461 6187 (local number in Perth)<br>
Photos <a href="http://www.flickr.com/photos/jalbarragup_artworks/" target="_blank">
http://www.flickr.com/photos/<u></u>jalbarragup_artworks/</a><br>
<br>
</div>
<div class="HOEnZb">
<div class="h5">______________________________<u></u>_________________<br>
PLUG discussion list: <a href="mailto:plug@plug.org.au" target="_blank">plug@plug.org.au</a><br>
<a href="http://lists.plug.org.au/mailman/listinfo/plug" target="_blank">http://lists.plug.org.au/<u></u>mailman/listinfo/plug</a><br>
Committee e-mail: <a href="mailto:committee@plug.org.au" target="_blank">committee@plug.org.au</a><br>
PLUG Membership: <a href="http://www.plug.org.au/membership" target="_blank">http://www.plug.org.au/<u></u>membership</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</body>
</html>