New posting-account attribute in Injection-Info for CURRENT

Julien ÉLIE julien at trigofacile.com
Sun Nov 9 15:10:33 UTC 2014


Hi all,

In CURRENT (INN 2.6.0), a new parameter is now available in inn.conf:
addinjectionpostingaccount.

When set to true, the Injection-Info: header field contains an additional
posting-account attribute that mentions the username assigned to the
user at connection time or after authentication.  The default value
for this parameter is false.

I know that some of the readers of this list use Perl filters to obfuscate
the contents of the Injection-Info: header fields, especially the posting-host
attribute.
If you want, you can add the posting-account attribute and obfuscate it
the same way you do with the posting-host.


Examples:

If authenticated as the user "julien" (AUTHINFO):

Injection-Info: news.trigofacile.com; posting-account="julien"; posting-host="22.155-224-89.dsl.completel.net:89.224.155.22";
	logging-data="4543"; mail-complaints-to="abuse at ..."


If sending a post via inews (for which the connection matches the user "<localhost>" set by an access block in readers.conf):

Injection-Info: news.trigofacile.com; posting-account="<localhost>"; posting-host="localhost.localdomain:127.0.0.1";
	logging-data="5458"; mail-complaints-to="abuse at ..."

-- 
Julien ÉLIE

« Ils ont coulé mon entreprise. » (les pirates, dans _Astérix_)


More information about the inn-workers mailing list