<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 04/03/14 10:46, Leon Wright wrote:<br>
    </div>
    <blockquote
cite="mid:CAGHRBmShipjRdaP+_OwWygcWcGXdPiyg2p_HD8FOs=JOAUvsbQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">Krystin,
        <div><br>
        </div>
        <div>I'll wait for a Westnet person to respond, but thankyou
          from the Admin team!</div>
        <div><br>
        </div>
        <div>Regards,</div>
        <div><br>
        </div>
        <div>Leon</div>
      </div>
      <div class="gmail_extra">
        <br clear="all">
        <div>--<br>
          DRM 'manages access' in the same way that jail 'manages
          freedom.'<br>
          <br>
          # cat /dev/mem | strings | grep -i cats<br>
          Damn, my RAM is full of cats... MEOW!!</div>
        <br>
        <br>
        <div class="gmail_quote">On Tue, Mar 4, 2014 at 9:42 AM, Krystin
          Dix <span dir="ltr"><<a moz-do-not-send="true"
              href="mailto:krystindix@lothar.id.au" target="_blank">krystindix@lothar.id.au</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div>
              <div
                style="direction:ltr;font-size:10pt;font-family:Tahoma">
                <div
                  style="direction:ltr;font-size:10pt;font-family:Tahoma">Hey
                  all,<br>
                  <br>
                  I have confirmed with my engineers that this was a
                  custom rule that was set to assist some domains with
                  catchall@ mailbox using a pop connector to add the
                  X-Envelope-To field so the pop connector can ascertain
                  which user to assign the mail to. I have been told
                  this has been removed and should be functioning as per
                  normal now.<br>
                  <br>
                </div>
              </div>
            </div>
          </blockquote>
        </div>
      </div>
    </blockquote>
    <br>
    Confirmed fixed. X-Envelope-To now only has my email address in it,
    as it should be.<br>
    <br>
    Thanks Krystin and your team. It's good to have iiNet using your
    initiative and picking up issues like this and sorting them :-)<br>
    <br>
    Thanks<br>
    <br>
    Steve<br>
    <br>
    <blockquote
cite="mid:CAGHRBmShipjRdaP+_OwWygcWcGXdPiyg2p_HD8FOs=JOAUvsbQ@mail.gmail.com"
      type="cite">
      <div class="gmail_extra">
        <div class="gmail_quote">
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div>
              <div
                style="direction:ltr;font-size:10pt;font-family:Tahoma">
                <div
                  style="direction:ltr;font-size:10pt;font-family:Tahoma">
                  Any issues let me know.<br>
                  <br>
                  Regards,<br>
                  Krystin Dix<br>
                  <div style="font-size:16px;font-family:Times New
                    Roman">
                    <hr>
                    <div style="direction:ltr"><font color="#000000"
                        face="Tahoma"><b>From:</b> plug [<a
                          moz-do-not-send="true"
                          href="mailto:plug-bounces@plug.org.au"
                          target="_blank">plug-bounces@plug.org.au</a>]
                        on behalf of Leon Wright [<a
                          moz-do-not-send="true"
                          href="mailto:techman83@gmail.com"
                          target="_blank">techman83@gmail.com</a>]<br>
                        <b>Sent:</b> Thursday, 27 February 2014 11:36 AM<br>
                        <b>To:</b> Steve Boak<br>
                        <b>Cc:</b> <a moz-do-not-send="true"
                          href="mailto:plug@plug.org.au" target="_blank">plug@plug.org.au</a>
                        <div>
                          <div class="h5"><br>
                            <b>Subject:</b> Re: [plug] PLUG headers
                            revealing email addresses<br>
                          </div>
                        </div>
                      </font><br>
                    </div>
                    <div>
                      <div class="h5">
                        <div>
                          <div dir="ltr">Nice work investigating this
                            James/Krystin. Keep us posted on how it pans
                            out. If the mailing list needs some tweaking
                            to avoid it occurring, I'll discuss it with
                            the admin team.
                            <div><br>
                            </div>
                            <div>Leon</div>
                          </div>
                          <div class="gmail_extra"><br clear="all">
                            <div>--<br>
                              DRM 'manages access' in the same way that
                              jail 'manages freedom.'<br>
                              <br>
                              # cat /dev/mem | strings | grep -i cats<br>
                              Damn, my RAM is full of cats... MEOW!!</div>
                            <br>
                            <br>
                            <div class="gmail_quote">On Wed, Feb 26,
                              2014 at 10:13 PM, Steve Boak <span
                                dir="ltr">
                                <<a moz-do-not-send="true"
                                  href="mailto:sboak@westnet.com.au"
                                  target="_blank">sboak@westnet.com.au</a>></span>
                              wrote:<br>
                              <blockquote class="gmail_quote"
                                style="margin:0 0 0 .8ex;border-left:1px
                                #ccc solid;padding-left:1ex">
                                <div>On 26/02/14 20:16, Krystin Dix
                                  wrote:<br>
                                  <blockquote class="gmail_quote"
                                    style="margin:0 0 0
                                    .8ex;border-left:1px #ccc
                                    solid;padding-left:1ex">
                                    Hey Steve,<br>
                                    <br>
                                    I will pass this on to the guys
                                    responsible and see what they say.
                                    (I currently work for iiNet /
                                    Westnet Hosting).<br>
                                    <br>
                                    It is interesting to see that it is
                                    done this way. If you wouldn't mind
                                    forwarding me off list the exact
                                    headers received to
                                    <a moz-do-not-send="true"
                                      href="mailto:kdix@staff.iinet.net.au"
                                      target="_blank">kdix@staff.iinet.net.au</a>
                                    and I will come back here with a
                                    response.<br>
                                  </blockquote>
                                  <br>
                                </div>
                                Done
                                <div>
                                  <div><br>
                                    <br>
                                    <blockquote class="gmail_quote"
                                      style="margin:0 0 0
                                      .8ex;border-left:1px #ccc
                                      solid;padding-left:1ex">
                                      Thanks<br>
                                      Krystin Dix<br>
                                      <br>
                                      -----Original Message-----<br>
                                      From: plug [mailto:<a
                                        moz-do-not-send="true"
                                        href="mailto:plug-bounces@plug.org.au"
                                        target="_blank">plug-bounces@plug.org.au</a>]
                                      On Behalf Of Steve Boak<br>
                                      Sent: Wednesday, February 26, 2014
                                      6:58 PM<br>
                                      To: <a moz-do-not-send="true"
                                        href="mailto:plug@plug.org.au"
                                        target="_blank">plug@plug.org.au</a><br>
                                      Subject: Re: [plug] PLUG headers
                                      revealing email addresses<br>
                                      <br>
                                      On 26/02/14 14:37, James
                                      Henstridge wrote:<br>
                                      <blockquote class="gmail_quote"
                                        style="margin:0 0 0
                                        .8ex;border-left:1px #ccc
                                        solid;padding-left:1ex">
                                        On Mon, Feb 24, 2014 at 9:36 AM,
                                        Steve Boak <<a
                                          moz-do-not-send="true"
                                          href="mailto:sboak@westnet.com.au"
                                          target="_blank">sboak@westnet.com.au</a>>
                                        wrote:<br>
                                        <blockquote class="gmail_quote"
                                          style="margin:0 0 0
                                          .8ex;border-left:1px #ccc
                                          solid;padding-left:1ex">
                                          Hi<br>
                                          <br>
                                          I just happened to be looking
                                          through the source of a plug
                                          list<br>
                                          message and saw this in the
                                          headers (and yes, my address
                                           is one of<br>
                                          them)<br>
                                          <br>
                                          X-Envelope-To: <a
                                            moz-do-not-send="true"
                                            href="mailto:bxxx@westnet.com.au"
                                            target="_blank">bxxx@westnet.com.au</a>,
                                          <a moz-do-not-send="true"
                                            href="mailto:bxxx@westnet.com.au"
                                            target="_blank">bxxx@westnet.com.au</a>,<br>
                                          <a moz-do-not-send="true"
                                            href="mailto:cxxx@westnet.com.au"
                                            target="_blank">cxxx@westnet.com.au</a>,<br>
                                             <a moz-do-not-send="true"
                                            href="mailto:gxxx@westnet.com.au"
                                            target="_blank">gxxx@westnet.com.au</a>,
                                          <a moz-do-not-send="true"
                                            href="mailto:gxxx@westnet.com.au"
                                            target="_blank">
                                            gxxx@westnet.com.au</a>, <a
                                            moz-do-not-send="true"
                                            href="mailto:jxxx@westnet.com.au"
                                            target="_blank">jxxx@westnet.com.au</a>,<br>
                                             <a moz-do-not-send="true"
                                            href="mailto:mxxx@westnet.com.au"
                                            target="_blank">mxxx@westnet.com.au</a>,
                                          <a moz-do-not-send="true"
                                            href="mailto:mxxx@westnet.com.au"
                                            target="_blank">
                                            mxxx@westnet.com.au</a>, <a
                                            moz-do-not-send="true"
                                            href="mailto:nxxx@westnet.com.au"
                                            target="_blank">nxxx@westnet.com.au</a>,<br>
                                             <a moz-do-not-send="true"
                                            href="mailto:rxxx@westnet.com.au"
                                            target="_blank">rxxx@westnet.com.au</a>,
                                          <a moz-do-not-send="true"
                                            href="mailto:sxxx@westnet.com.au"
                                            target="_blank">
                                            sxxx@westnet.com.au</a>, <a
                                            moz-do-not-send="true"
                                            href="mailto:vxxx@westnet.com.au"
                                            target="_blank">vxxx@westnet.com.au</a>,<br>
                                             <a moz-do-not-send="true"
                                            href="mailto:wxxx@westnet.com.au"
                                            target="_blank">wxxx@westnet.com.au</a><br>
                                          <br>
                                          I've anonymised them of
                                          course, but interesting to
                                          note that it's<br>
                                          only westnet addresses showing
                                          up here. Is this an artefact
                                          of the<br>
                                          way the list mailer groups
                                          it's send list?<br>
                                          <br>
                                          Can these be hidden in some
                                          way, or is that just the way
                                          the list works?<br>
                                        </blockquote>
                                        Hi Steve,<br>
                                        <br>
                                        I don't see that header in any
                                        of the PLUG messages in my
                                        archive.<br>
                                        Given that the addresses you've
                                        listed are all @<a
                                          moz-do-not-send="true"
                                          href="http://westnet.com.au"
                                          target="_blank">westnet.com.au</a>,
                                        is it<br>
                                        possible that the header is
                                        being added by your ISP?  The
                                        ordering of<br>
                                        the header relative to the
                                        "Received" headers might give a
                                        clue about<br>
                                        whether this is the case.<br>
                                        <br>
                                        When sending bulk mail (such as
                                        mailing list traffic), it isn't<br>
                                        uncommon to group the delivery
                                        in this way to cut down on
                                        traffic.<br>
                                        There may be an option in
                                        mailman to deliver messages
                                        independently,<br>
                                        but it is really the ISP that is
                                        leaking the information to you.<br>
                                        <br>
                                        James.<br>
                                      </blockquote>
                                      Hi James<br>
                                      <br>
                                      The adding of the X-Envelope-To
                                      header with multiple westnet
                                      addresses started on the 1st of
                                      February (this year), and every
                                      email I have received directly
                                      from the plug list since then has
                                      it. Emails which are addressed to
                                      me and cc'ed to the plug list
                                      (such as your email above) don't,
                                      even though they are delivered to
                                      the same addresses.<br>
                                      <br>
                                      Thanks for the tip about the
                                      ordering of headers - the extract
                                      below seems to indicate that it is
                                      iinet's mail server at fault.<br>
                                      <br>
                                      X-IronPort-AV:
                                      E=Sophos;i="4.97,527,1389715200";
                                      d="scan'208";a="185453217"<br>
                                      X-Envelope-To: <a
                                        moz-do-not-send="true"
                                        href="mailto:bxxx@westnet.com.au"
                                        target="_blank">bxxx@westnet.com.au</a>,
                                      <a moz-do-not-send="true"
                                        href="mailto:bxxx@westnet.com.au"
                                        target="_blank">bxxx@westnet.com.au</a>,
                                      <a moz-do-not-send="true"
                                        href="mailto:cxxx@westnet.com.au"
                                        target="_blank">
                                        cxxx@westnet.com.au</a>, <a
                                        moz-do-not-send="true"
                                        href="mailto:gxxx@westnet.com.au"
                                        target="_blank">gxxx@westnet.com.au</a>,
                                      <a moz-do-not-send="true"
                                        href="mailto:gxxx@westnet.com.au"
                                        target="_blank">gxxx@westnet.com.au</a>,
                                      <a moz-do-not-send="true"
                                        href="mailto:jxxx@westnet.com.au"
                                        target="_blank">
                                        jxxx@westnet.com.au</a>, <a
                                        moz-do-not-send="true"
                                        href="mailto:mxxx@westnet.com.au"
                                        target="_blank">mxxx@westnet.com.au</a>,
                                      <a moz-do-not-send="true"
                                        href="mailto:mxxx@westnet.com.au"
                                        target="_blank">mxxx@westnet.com.au</a>,
                                      <a moz-do-not-send="true"
                                        href="mailto:nxxx@westnet.com.au"
                                        target="_blank">
                                        nxxx@westnet.com.au</a>, <a
                                        moz-do-not-send="true"
                                        href="mailto:rxxx@westnet.com.au"
                                        target="_blank">rxxx@westnet.com.au</a>,
                                      <a moz-do-not-send="true"
                                        href="mailto:sxxx@westnet.com.au"
                                        target="_blank">sxxx@westnet.com.au</a>,
                                      <a moz-do-not-send="true"
                                        href="mailto:vxxx@westnet.com.au"
                                        target="_blank">
                                        vxxx@westnet.com.au</a>, <a
                                        moz-do-not-send="true"
                                        href="mailto:wxxx@westnet.com.au"
                                        target="_blank">wxxx@westnet.com.au</a><br>
                                      Received: from unknown (HELO <a
                                        moz-do-not-send="true"
                                        href="http://power.plug.org.au"
                                        target="_blank">power.plug.org.au</a>)
                                      ([54.252.97.56]) by
                                      <a moz-do-not-send="true"
                                        href="http://icp-osb-irony-in14.iinet.net.au"
                                        target="_blank">icp-osb-irony-in14.iinet.net.au</a>
                                      with ESMTP; 23 Feb 2014 10:51:27
                                      +0800<br>
                                      Received: from <a
                                        moz-do-not-send="true"
                                        href="http://power.plug.org.au"
                                        target="_blank">power.plug.org.au</a>
                                      (localhost [IPv6:::1]) by
                                      <a moz-do-not-send="true"
                                        href="http://power.plug.org.au"
                                        target="_blank">power.plug.org.au</a>
                                      (Postfix) with ESMTP id
                                      9D0965D489; Sun, 23 Feb 2014<br>
                                      02:54:04 +0000 (UTC)<br>
                                      X-Original-To: <a
                                        moz-do-not-send="true"
                                        href="mailto:plug@plug.org.au"
                                        target="_blank">plug@plug.org.au</a><br>
                                      <br>
                                      I'll approach Westnet for an
                                      explanation.<br>
                                      <br>
                                      Steve<br>
                                      <br>
                                      _______________________________________________<br>
                                      PLUG discussion list: <a
                                        moz-do-not-send="true"
                                        href="mailto:plug@plug.org.au"
                                        target="_blank">plug@plug.org.au</a><br>
                                      <a moz-do-not-send="true"
                                        href="http://lists.plug.org.au/mailman/listinfo/plug"
                                        target="_blank">http://lists.plug.org.au/mailman/listinfo/plug</a><br>
                                      Committee e-mail: <a
                                        moz-do-not-send="true"
                                        href="mailto:committee@plug.org.au"
                                        target="_blank">committee@plug.org.au</a><br>
                                      PLUG Membership: <a
                                        moz-do-not-send="true"
                                        href="http://www.plug.org.au/membership"
                                        target="_blank">http://www.plug.org.au/membership</a><br>
                                    </blockquote>
                                    <br>
                                    <br>
                                  </div>
                                </div>
                                <div>-- <br>
                                  Steve Boak, (08) 9756 0662, P.O. Box
                                  240, Nannup, WA 6275<br>
                                  Engin VOIP number (08) 6461 6187
                                  (local number in Perth)<br>
                                  Photos <a moz-do-not-send="true"
                                    href="http://www.flickr.com/photos/jalbarragup_artworks/"
                                    target="_blank">
                                    http://www.flickr.com/photos/jalbarragup_artworks/</a><br>
                                  <br>
                                </div>
                                <div>
                                  <div>_______________________________________________<br>
                                    PLUG discussion list: <a
                                      moz-do-not-send="true"
                                      href="mailto:plug@plug.org.au"
                                      target="_blank">plug@plug.org.au</a><br>
                                    <a moz-do-not-send="true"
                                      href="http://lists.plug.org.au/mailman/listinfo/plug"
                                      target="_blank">http://lists.plug.org.au/mailman/listinfo/plug</a><br>
                                    Committee e-mail: <a
                                      moz-do-not-send="true"
                                      href="mailto:committee@plug.org.au"
                                      target="_blank">committee@plug.org.au</a><br>
                                    PLUG Membership: <a
                                      moz-do-not-send="true"
                                      href="http://www.plug.org.au/membership"
                                      target="_blank">http://www.plug.org.au/membership</a><br>
                                  </div>
                                </div>
                              </blockquote>
                            </div>
                            <br>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <br>
    <br>
    <pre class="moz-signature" cols="72">-- 
Steve Boak, (08) 9756 0662, P.O. Box 240, Nannup, WA 6275
Engin VOIP number (08) 6461 6187 (local number in Perth)
Photos <a class="moz-txt-link-freetext" href="http://www.flickr.com/photos/jalbarragup_artworks/">http://www.flickr.com/photos/jalbarragup_artworks/</a>
</pre>
  </body>
</html>