[Pkg-dspam-misc] Bug#357270: Inoculated spam messages not viewable, deletable or deliverable

[Martijn Pieters]

Package: dspam-webfrontend
Version: 3.6.4-2
Severity: normal

When using a honeypot email address as inoculation source (dspam
--class=spam --source=inoculation) any email sent to this email address
will be treated as 100%-certain spam and after training, placed in the
quarantine mailbox. So far so good.

But because dspam doesn't ever forward the inoculation messages to the
user, these messages have no signature ID. The webfrontend does list
these messages on the Quarantine tab, but it cannot show these as the
CGI uses the signature ID to create the links.

The end result is that the quarantine tab links the subject of these
emails to a URL with an empty signatureID query parameter, which results
in an error.

One cannot delete individual inoculation messages for the same reason;
the checkbox to mark such messages uses the signature ID as well, and is
thus empty for inoculation messages. You can, however, still use the
'Delete All' button to clear all quarantined messages.

Last, and least, because of the lack of signature ID one cannot select
an inoculation message to have it delivered to the user. This is not
really a problem; one does not expect regular email on a spam-trap email
address.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14-2-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages dspam-webfrontend depends on:
ii  libgd-gd2-perl                1:2.30-1   Perl module wrapper for libgd - gd
ii  libgd-graph3d-perl            0.63-2     Create 3D Graphs with GD and GD::G

dspam-webfrontend recommends no packages.

-- no debconf information