-
-
Notifications
You must be signed in to change notification settings - Fork 2
qarf.1
qarf - qmail/IndiMail Abuse Report Format Generator
qarf [ -i ] -t recipient -f sender -s subject [ -m filename ]
qarf reads an rfc822 email on stdin and generates a report in ARF format as specified at
http://www.mipassoc.org/arf/specs/draft-shafranovich-feedback-report-05.txt
-t
Use argument as " RCPT TO " address. If this is not specified, the
domain is automatically picked up from the "Return-Path:" field in the
headers of the original mail. The recipient is modifed as abuse@domain.
-f
Use this argument as "From:" address.
-s
Argument to -s must be the "Subject:" field for the feedback report. If
this is not specified, the Subject field is automatically picked up from
the original email with "FW:" prefixed.
-m
Argument to -m should be a file containing text for the Abuse Report.
This will compose the first MIME part of the message. This file should
contains a human readable description of the report. If this is not
specified, a default text as given below is inserted
This is an email abuse report for an email received from IP
x.x.x.x on on Sat, 12 Feb 2011 12:02:27 +0530.
For more information about this format please see http://www.mipassoc.org/arf/.
-i
Use this argument to have "inline" disposition of the original mail
attached with the abuse report as opposed to the default "attachment"
disposition.
qarf adds the following headers in the feedback-report
Feedback-Type:
contains the type of feedback report (as defined in the corresponding
IANA registry). This is intended to let report generators distinguish
among different types of reports.
User-Agent:
indicates the name and version of the software program that generated
the report. This field is for documentation only; report receivers
SHOULD NOT expect user agent names to belong to a known set.
Version:
indicates the version of specification that the report generator is
using to generate the report. The version number in this specification
is set to "0.1".
Original-Envelope-Id:
envelope ID string used in the original SMTP transaction. This is picked
up from the Message-ID field in the header of original email.
Original-Mail-From:
copy of the email address used in the MAIL FROM portion of the original
SMTP transaction. This is picked up from the Return-Path: field in
header of the original email.
Arrival-Date:
indicates the date the original message was received by recipient
system's MTA. This is picked up from the first Date: field in the
header of original email.
Source-IP:
contains an IPv4 or IPv6 address of the MTA from which the original
message was received.
Original-Rcpt-To:
copy of the email address used in the RCPT TO portion of the original
SMTP transaction. This is picked up from the Delivered-To field in the
header of the original email.
The following header field will appear once in a DKIM failure report:
DKIM-Failure:
the type of DKIM verification failure that occurred; MUST be included
for "dkim" failure reports and MUST NOT be included otherwise. This is
set by checking the DKIM-Status field in the headers of the original
email.