Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TO and FROM address are the same for the "galaxy tool error report" #3144

Closed
hrhotz opened this issue Nov 10, 2016 · 4 comments
Closed

TO and FROM address are the same for the "galaxy tool error report" #3144

hrhotz opened this issue Nov 10, 2016 · 4 comments

Comments

@hrhotz
Copy link
Contributor

@hrhotz hrhotz commented Nov 10, 2016

When sending a "galaxy tool error report" mail, the TO and FROM address are the same. For example on our server:

From: help.bioinformatics@fmi.ch
Subject: Galaxy tool error report from hansrudolf.hotz@fmi.ch (Grouping1)
To: help.bioinformatics@fmi.ch, hansrudolf.hotz@fmi.ch

mails sent to "help.bioinformatics@fmi.ch" end up in our helpdesk ticketing system. However, a change in the helpdesk ticketing system we use, does not allow the creation of a ticket where the TO and FROM address are the same anymore. As a result the error reports get unnoticed. I can fix that on our side.

Nevertheless, I wonder, what is the reason for sending out a mail with such a configuration? I have looked at the code (~/lib/galaxy/tools/errors.py). At line 233, the FROM address gets the value of the TO address. It has been like this for years. Why? Wouldn't it make more sense, to change the FROM address to the user's address if there is one?

I don't wanna make a pull request yet, but I am happy to do so....unless there is a reason for this situation

Hans-Rudolf

@nsoranzo
Copy link
Member

@nsoranzo nsoranzo commented Nov 10, 2016

@hrhotz I think that forging the FROM address to be the user email would not be accepted by many SMTP servers.

Loading

@hrhotz
Copy link
Contributor Author

@hrhotz hrhotz commented Nov 10, 2016

@nsoranzo thank you very much for the explanation. This makes sense.
Though, it seems, our SMTP server does accept it.

Loading

@nsoranzo
Copy link
Member

@nsoranzo nsoranzo commented Nov 11, 2016

That's bad practice as it allows email spoofing and can be used by spammers.
Can we close the issue or do you have alternative suggestions?

Loading

@hrhotz
Copy link
Contributor Author

@hrhotz hrhotz commented Nov 11, 2016

sure we can close

Loading

@hrhotz hrhotz closed this Nov 11, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
2 participants