WDIFF

draft-showalter-sieve-04.txt --> draft-showalter-sieve-06.txt

Network Working Group T. Showalter
Internet Draft: Sieve Carnegie Mellon
Document: draft-showalter-sieve-04.txt August 1998 draft-showalter-sieve-06.txt January 25, 1999
Expire in six months (31 January 1999)

Sieve -- a

Sieve: A Mail Filtering Language

Status of this memo

This document is an Internet-Draft. Internet-Drafts are working
documents of the Internet Engineering Task Force (IETF), its areas,
and its working groups. Note that other groups may also distribute
working documents as Internet-Drafts.

Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as ``work in progress.''

To learn the current status of any Internet-Draft, please check the
``1id-abstracts.txt'' listing contained in the Internet-Drafts Shadow
Directories on ftp.is.co.za (Africa), ftp.nordu.net (Europe),
munnari.oz.au (Pacific Rim), ftp.ietf.org (US East Coast), or
ftp.isi.edu (US West Coast).

The protocol discussed in this document is experimental and subject
to change. Persons planning on either implementing or using this
protocol are STRONGLY URGED to get in touch with the author before
embarking on such a project.

Abstract

This document describes a mail filtering language for filtering
messages at time of final delivery. It is designed to be independent
of protocol, and implementable on either a mail client or mail
server. It is meant to be extensible, simple, and independent of
access protocol, mail architecture, and operating system. It is
suitable for running on a mail server where users may not be allowed
to execute arbitrary programs, such as on black box IMAP servers, as
it has no variables, loops, or ability to shell out to external
programs.

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 1]

Internet DRAFT Sieve August 7, 1998 January 25, 1999

Table of Contents

Status of this memo ............................................... 1
Copyright Notice .................................................. 1
Abstract .......................................................... 1
0. Meta-information on this draft ................................. 4
0.1. Discussion ................................................... 4
0.2. Known Problems ............................................... 4
0.2.1. Probable Extensions ........................................ 4
0.2.2. Known Bugs
0.3. Open Issues ................................................. 5
0.3. Noted Changes ................................................ 5
0.3.1. since -05 .................................................. 5
0.3.2. since -04 .................................................. 5
1. Introduction ................................................... 7
1.1. Conventions used Used in this document This Document ............................ 7
1.2. Example mail messages ........................................ 8
2. Design ......................................................... 9
2.1. Form of the language Language ......................................... 9
2.2. Whitespace ................................................... 9
2.3. Comments ..................................................... 9
2.4. Literal data Data ................................................. 9
2.4.1. Numbers .................................................... 10
2.4.2. Strings .................................................... 10
2.4.2.1. String lists Lists ............................................. 11
2.4.2.2. Headers .................................................. 11
2.4.2.3. Addresses ................................................ 11
2.5. Tests
2.5.1. ........................................................ 11
2.6. Tagged Arguments ............................................. 12
2.7. String Comparison
2.6.1. ............................................ 12
2.7.1. Match Keyword
2.6.2. Type ................................................. 13
2.7.2. Comparisons across Character Sets .......................... 13
2.7.3. Comparators
2.7. Tagged Arguments ................................................ 14
2.7.4. Comparisons against addresses .............................. 15
2.8. Blocks ....................................................... 15
2.9. Commands ..................................................... 15
2.9.1. Positional Arguments ....................................... 16
2.9.2. Optional Arguments ......................................... 16
2.9.3. Blocks as Arguments
2.11. ........................................ 16
2.10. Evaluation
2.11.1. .................................................. 16
2.10.1. Implicit keep
3. Conditionals Keep ............................................. 16
2.10.2. Extensions and Optional Features .......................... 16
3. Control Structures ............................................. 17
4. Actions ........................................................ 18

Showalter Expire in Six Months [Page 2]

Internet DRAFT Sieve January 25, 1999

4.1. Action reject ................................................ 18
4.2. Action fileinto .............................................. 19
4.3. Action forward redirect .............................................. 19
4.4. Action keep

Showalter Expires 31 Jan 1999 [Page 2]

Internet DRAFT Sieve August 7, 1998 .................................................. 20
4.6. Action stop .................................................. 20
4.7. Action discard ............................................... 20
4.8. Action require ............................................... 21
5. Tests .......................................................... 21
5.1. Test allof address ................................................. 21
5.2. Test anyof allof ................................................... 22
5.3. Test exists anyof ................................................... 22
5.4. Test false envelope ................................................ 22
5.5. Test header exists .................................................. 23
5.6. Test not false ................................................... 23
5.7. Test header .................................................. 23
5.8. Test not ..................................................... 24
5.9. Test size .................................................... 24
6. Errors in Processing a Script
7. Extensibility
7.1. .................................................. 25
6.1. Capability String
7.2. ............................................ 25
6.2. Registry
7.3. ..................................................... 26
6.3. Capability Transport
8. ......................................... 26
7. Transmission
9. ................................................... 26
8. Acknowledgments
10. ................................................ 26
9. Formal Grammar
11. ................................................ 26
10. Security Considerations
12. ....................................... 28
11. Author's Address
Appendices .............................................. 28
Appendix A. References ........................................... 28
Appendix B. Full Copyright Statement .............................. 29

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 3]

Internet DRAFT Sieve August 7, 1998

Showalter Expires 31 Jan January 25, 1999

Showalter Expire in Six Months [Page 2]

Internet DRAFT Sieve August 7, 1998 January 25, 1999

0. Meta-information on this draft

This information is intended to facilitate discussion. It will be
removed when this document leaves the Internet-Draft stage.

Draft number 05 was circulated among developers at the 43nd IETF in
Orlando, but never seemed to make it to the Internet-Drafts
repository. In the event that this draft's file is numbered -05,
readers are advised that there were two with that number.

0.1. Discussion

This draft is being discussed on the MTA Filters mailing list at
<ietf-mta-filters@imc.org>. Subscription requests can be sent to
<ietf-mta-filters-request@imc.org> (send an email message with the
word "subscribe" in the body). More information on the mailing list
along with a WWW archive of back messages is available at
<http://www.imc.org/ietf-mta-filters>.
<http://www.imc.org/ietf-mta-filters/>.

0.2. Known Problems

0.2.1. Probable Extensions

The following suggestions have been made, and will probably be
addressed by extensions.

An extension for regular expressions will be written. While regular
expressions are of questionable utility for most users, the
programmers writing implementations desperately want regular
expressions.

Envelope-matching commands are not readily supported by all mail
systems, and putting them in the draft will result in a system that
cannot be implemented by a mail architecture that does not adequately
store envelopes.

"Detailed" addressing or "sub-addressing" (i.e., the "foo" in an
address "tjs+foo@andrew.cmu.edu") is not handled, and will be moved
to an extension for those systems that offer it.

A vacation command has been requested for an extension; a preliminary
draft exists and will be submitted to the internet-drafts repository.
Vacation functionality is isn't in the draft because having vacation
assumes you can store the addresses of people who have already
received vacation notifications, which isn't always the case.

A suggestion was made to set IMAP flags on delivery (e.g., \Flagged,
\Deleted, \Answered, \Seen).

An "include" command is not included, but has been suggested for an
extension.

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 4]

Internet DRAFT Sieve August 7, 1998 January 25, 1999

0.2.2. Known Bugs

The formal grammar probably still has some holes in it.

The reject command needs to be rechecked against the DSN
specification.

The error-handling clauses of this specification may not be
completely sensible, and may conflict.

The discussion of the limits of actions is not there. Only one
forward should be allowed per message. Keep and reject are mutually
exclusive.

0.3. Open Issues

The language is represented in UTF-8, but the event that there character set specified
in the ABNF is an error while processing a script, what
happens? only good for ASCII. This obviously needs to be
fixed.

0.3. Noted Changes

0.3.1. since -05

The following are changes from draft implies you file into INBOX, but what if you've
already taken actions before you do this? (The parts of the draft
that require syntax checking stuff are all SHOULDs.)

I tried to fill in some 05. (This may not be complete.)
Most of these changes were discussed at the blanks Sieve meeting in previous versions; among
them, Orlando
at the description 43rd IETF.

All nits submitted by Greg Sereda are hopefully addressed. Most of what a rejected input message looks like,
these were example bugs, but it's still nearly incomplete.

I moved the substring matching stuff he also pointed out of the header command that types for
arguments were under-specified and
into a section in several cases orders of its own
arguments disagreed with the syntax.

"Match keyword" was changed to "match type" as an editorial change.

"Forward" was renamed to "redirect" because of the conflict between
mutliple meanings of "forward" in order to make it is reusable by extensions.
Suggestions on this section would clear exactly what
we meant.

Limitation of one redirect per message should be appreciated.

I tried removed.

The types of arguments have been added to fill in the blanks their syntax line.

Added "require" back in the section on extensibility a slightly different form. "Require" is now
an action (arbitrarily) and
borrowed some stuff from the ACAP spec (specifically, the comparator
registry), but it's probably has been added to sec. 2.10 as well.

Implementations are responsible for not complete or good enough.

0.3. Noted Changes

This draft was unfortunately rushed and probably contains numerous
errors. This allowing mail loops.

All discussion of short-circuit evaluation has been removed. On a
related note, tests must not have side effects.

Envelope is purely the fault required to drop source routes.

An address-matching primitive has been added.

0.3.2. since -04

Here are a list of changes from draft 04. (It may not be complete.)

* Concensus: i;ascii-casemap is required.

Showalter Expire in Six Months [Page 5]

Internet DRAFT Sieve January 25, 1999

* Consensus: i;ascii-casemap is the editor. For this reason,
readers default.

* Header name compares are asked to subscribe to always case-insensitive; the mailing list noted above draft now
says so.

* Several examples were fixed, but it is likely that errors remain.

* Bug: Section 7, remove reference to "support".

* There are two namespaces for
discussion, as well as some inevitable corrections.

The grammar extension names, one "vnd.", one
everything else, like MIME.

* All XXXs have been removed, except for in IANA section.

* Fileinto is optional, and discussion of local mail folders and POP3
has changed substantially been removed.

* A non-present comparator is considered to allow easier modification be basically a syntax
error.

* Resent headers are not to be added by
extensions at the expense of some additional definition in the rest
of "redirect" command.

* Tagged arguments must follow the draft.

Support and reply have been removed, keyword, and may not be
interspersed with positional arguments.

* Envelope-matching commands are to be added with the format of stringlists syntax that
Barry suggested.

* Put back :matches match type.

* What happens when an error occurs has changed. been dropped.

* Reject is now optional.

* Implementations are encouraged to decode header charsets, and if
they don't, are required to not do compares on 8-bit data.

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 5] 6]

Internet DRAFT Sieve August 7, 1998 January 25, 1999

1. Introduction

This memo documents a language that can be used to create filters for
electronic mail. It is not tied to any particular operating system or
mail architecture. It requires the use of [IMAIL]-compliant
messages, but otherwise should generalize to other systems that meet
these criteria.

The language is powerful enough to be useful, but limited in power in
order to allow for a safe server-side filtering system. The
intention is to make it impossible for users to do anything more
complex (and dangerous) than write simple mail filters, along with
facilitating GUI-based editors. The language is not Turing-complete,
and provides no way to write a loop or a function. Variables are not
provided.

Implementations of the language are expected to take place at time of
final delivery, when the message is moved to the user-accessible
mailbox. In systems where the MTA does final delivery, such as and
traditional UNIX mail, it is reasonable to sort when the MTA deposits
mail into the user's mailbox. If the MTA does not do final delivery,
or lacks the power to sort into separate mailboxes, as is the case
under POP3, the MUA must do filtering into local-disk folders.

There are a number of reasons to use a filtering system. Mail
traffic for most users has been increasing due both to increased
usage of e-mail, the emergence of unsolicited email as a form of
advertising, and increased usage of mailing lists.

Experience at Carnegie Mellon has shown that if a filtering system is
made available to users, many will make use of it in order to file
messages from specific users or mailing lists. However, many others
did not make use of the Andrew system's FLAMES [FLAMES] filtering
language due to difficulty in setting it up.

Because of the expectation that users will make use of filtering if
it is offered and easy to use, this language has been made simple
enough to allow many users to make use of it, but rich enough that it
can be used productively. However, it is expected that GUI-based
editors will be the preferred way of editing filters for a large
number of users.

1.1. Conventions used Used in this document

In examples, line breaks have been inserted for readability. This Document

In the sections of this document that discuss the requirements of
various keywords and operators, the following conventions have been

Showalter Expires 31 Jan 1999 [Page 6]

Internet DRAFT Sieve August 7, 1998
adopted.

The key words "MUST", "MUST NOT", "SHOULD", "SHOULD NOT", "CAN", and
"MAY" in this document are to be interpreted as defined in

Showalter Expire in Six Months [Page 7]

Internet DRAFT Sieve January 25, 1999

[KEYWORDS].

Each section on a test, action, or control structure has a line
labeled "Syntax:". This line describes the syntax of the command,
including its name and its arguments. Required arguments are listed
inside angle brackets ("<" and ">"). Optional arguments ">"). Optional arguments are listed
inside square brackets ("[" and "]"). Each argument is followed by
its type, so "<key: string>" represents an argument called "key" that
is a string. Literal strings are represented with double-quoted
strings. Alternatives are seperated with slashes, and parenthesis
are used for grouping, similar to [ABNF].

In the "Syntax" line, there are three special pieces of syntax that
are frequently repeated, MATCH-TYPE, COMPARATOR, and ADDRESS-PART.
These are listed
inside square brackets ("[" discussed in sections 2.7.1, 2.7.3, and "]"). However, the 2.7.4,
respectively.

The formal grammar for these commands in section 10 and is the
authoritative reference on how to construct these commands. commands, but the formal
grammar does not specify the order, semantics, number or types of
arguments to commands, nor the legal command names. The intent is to
allow for extension without changing the grammar.

1.2. Example mail messages

The following mail messages will be used throughout this document in
examples.

Message A
-----------------------------------------------------------
Date: Tue, 1 Apr 1997 09:06:31 -0800 (PST)
From: coyote@desert.org
To: roadrunner@birdseed.org
Subject: I have a present for you

Look, I'm sorry about the whole anvil thing, and I really
didn't mean to try and drop it on you from the top of the
cliff. I want to try to make it up to you. I've got some
great birdseed over here at my place -- top place--top of the line
stuff -- and
stuff--and if you come by, I'll have it all wrapped up
for you. I'm really sorry for all the problems I've caused
for you over the years, but I know we can work this out.
--
Wile E. Coyote "Super Genius" coyote@znic.net
-----------------------------------------------------------

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 7] 8]

Internet DRAFT Sieve August 7, 1998 January 25, 1999

Message B
-----------------------------------------------------------
From: youcouldberich!@reply-by-postal-mail
Sender: b1ff@de.res.frobnitzm.edu
To: rube@landru.melon.net
Date: Mon, 31 Mar 1997 18:26:10 -0800 (PST)
Subject: $$$ YOU, TOO, CAN BE A MILLIONAIRE! $$$

YOU MAY HAVE ALREADY WON TEN MILLION DOLLARS, BUT I DOUBT
IT! SO JUST POST THIS TO SIX HUNDRED NEWSGROUPS! IT WILL
GUARANTEE THAT YOU GET AT LEAST FIVE RESPONSES WITH MONEY!
MONEY! MONEY! COLD HARD CASH! YOU WILL RECEIVE OVER
$20,000 IN LESS THAN TWO MONTHS! AND IT'S LEGAL!!!!!!!!!
!!!!!!!!!!!!!!!!!!111111111!!!!!!!11111111111!!1 JUST
SEND $5 IN SMALL, UNMARKED BILLS TO THE ADDRESSES BELOW!
-----------------------------------------------------------

2. Design

2.1. Form of the language Language

This language is made up as a set of commands. Commands can take a
number of arguments; arguments can be either literal data, tests, or
blocks of commands.

The language is represented in UTF-8, as specified in [UTF-8].

2.2. Whitespace

Whitespace is used to separate commands. Whitespace is made up of
tabs, newlines (CRLF, never just CR or LF), and the space character.
The amount of whitespace used is not significant.

2.3. Comments

Comments begin with a "#" character that is not contained within a
string and continue until the next CRLF.

Example: if size over :over 100K { # this is a comment
discard;
}

XXX this example is broken

2.4. Literal data Data

Literal data means data that is not executed and is supplied as
arguments, such as numbers and strings.

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 8] 9]

Internet DRAFT Sieve August 7, 1998 January 25, 1999

2.4.1. Numbers

Numbers are given as ordinary decimal numbers. However, those
numbers that have a tendency to be fairly large, such as message
sizes, may MAY have a "K", "M", or "G" appended to indicate a multiple of
a base-two number. To be comparable with the power-of-two-based
versions of SI units that computers frequently use, K specifies kilo,
or 1,024 (2^10) times the value of the number; M specifies mega, or
1,048,576 (2^20) times the value of the number; and G specifies giga,
or 1,073,741,824 (2^30) times the value of the number.

Implementations MUST provide 31 bits of magnitude in numbers, but may
provide more.

Negative, fractional, and decimal numbers are not permitted by this
specification.

2.4.2. Strings

Scripts involve large numbers of strings, as they are used for
pattern matching, addresses, and textual bodies, etc. Typically,
short quoted strings suffice for most uses, but a more convenient
form is provided for longer strings such as bodies of messages.

A quoted string starts and ends with a single double quote (the <">
character). A backslash ("\") inside of a quoted string is followed
by either another backslash or a double quote. This two-character
sequence represents a single backslash or double-quote within the
string, respectively.

Other escape sequences may be permitted depending on context. An
undefined escape sequence (such as "\a" in a context where "a" has no
special meaning) is interpreted as if there were no backslash (in
this case, "\a" is just "a").

Non-printing characters such as tabs, CR and LF, and control
characters are permitted in strings. NUL (ASCII 0) is not allowed in
strings.

For entering larger amounts of text, such as an email message, a
multi-line form is allowed. It starts with the keyword "text:",
followed by a CRLF, and ends with the sequence of a CRLF, a single
period, and another CRLF. In order to allow the message to begin
lines with a single-dot, lines are dot-stuffed. That is, when
composing a message body, an extra `.' is added before each line
which begins with a `.'. When the server interprets the script,
these extra dots are removed.

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 9] 10]

Internet DRAFT Sieve August 7, 1998 January 25, 1999

Note that a comment may occur in between the "text:" and the CRLF,
but not within the string itself.

2.4.2.1. String lists Lists

When matching patterns, strings frequently come in groups. For this
reason, a list of strings is allowed in many tests, implying that if
the test is true using any one of the strings, then the test is true.
Implementations are encouraged to use short-circuit evaluation in
these cases.

For instance, the test `header :contains ["To", "Cc"] contains
["me@frobnitzm.edu", "me00@landru.melon.edu"]' is true if either the
To header or Cc header of the input message contains either of the
e-mail addresses "me@frobnitzm.edu" or "me00@landru.melon.edu".

Conversely, in any case where a list of strings would be appropriate,
a single string is allowed without being a member of a list; it is
equivalent to a list with a single member. So the test `exists "To"'
is equivalent to the test `exists ["To"]'.

2.4.2.2. Headers

Headers are a subset of strings. In the Internet Message
Specification [IMAIL], each header line is allowed to have whitespace
nearly anywhere in the line, including after the field name and
before the subsequent colon. Extra spaces between the header name
and the ":" in a header field are ignored by the interpreter.

A header name never contains a colon. The "From" header refers to a
line beginning "From:" (or "From :", etc.). No header will match
the string "From:" due to the trailing colon.

2.4.2.3. Addresses

A number of commands call for email addresses, which are also commands call for email addresses, which are also a
subset of strings. These addresses must be compliant with [IMAIL].
Implementations MUST ensure that the addresses are syntactically
valid, but need not ensure that they are actually deliverable.

2.5. Tests

Tests are given as arguments to commands in order to control how the
run. Generally, a test is used to decide if a block of code should
be evaluated.

Tests MUST NOT have side effects. That is, a test must not make
changes to state. No tests in this specification have side effects,

Showalter Expire in Six Months [Page 11]

Internet DRAFT Sieve January 25, 1999

and side effects are forbidden in extensions as well.

Note: Tests with side effects impair readability and maintainability
and are difficult to represent in a graphic interface to
generating scripts, so side effects have been confined to
actions where they are more clear.

2.6. Tagged Arguments

This document provides for tagged arguments in the style of
CommonLISP.

A tagged argument is an an argument for a command that begins with
":", and consists of a
subset tag naming the argument, such as ":contains".
This argument means that zero or more of strings. the next tokens have some
particular meaning, depending on the argument. These addresses must next tokens may
be compliant with [IMAIL].
Implementations MUST ensure the addresses numbers or strings, but are syntactically valid,
and need never blocks.

One case where this is useful is the ":comparator" argument, which
allows the user to specify which ACAP comparator will be used to
compare two strings, since different languages may impose different
orderings on UTF-8 [UTF-8] characters.

Tagged arguments must appear before positional arguments, but they
may appear in any order. For convienence, this is not ensure that expressed in
the syntax definitions with commands, but they are actually deliverable.

2.5. Tests

Tests are given as still may be reordered
arbitrarily provided they appear before positional arguments. This
explicitally includes match types and comparator arguments to commands in order to control how (see 2.7.1
and 2.7.3).

To keep the
run. Generally, a test is used to decide if a block of code language simple, tagged arguments should
be evaluated.

Showalter Expires 31 Jan 1999 [Page 10]

Internet DRAFT Sieve August 7, 1998

2.5.1. not take tagged
arguments as arguments.

2.7. String Comparison

When matching one string against another, there are a number of ways
of performing the match. These are accomplished with three matches
-- an types of
matches: exact match, a substring match, and a wildcard glob-style
match. In order to provide for matches between character sets and
case insensitivity, Sieve borrows ACAP's comparator registry.

2.6.1.

However, when a string is being used to represent the name of a
header, the comparator is not user-specified. Header comparisons are
always done in a case-insensitive manner, since this is the way
things are specified in the message specification [IMAIL]. That is,
header-name comparisons are always done with the "i;ascii-casemap"
comparator.

Showalter Expire in Six Months [Page 12]

Internet DRAFT Sieve January 25, 1999

2.7.1. Match Keyword Type

There are two three allowed match keywords types describing the allowed match in
this draft; draft: they are ":is" ":is", ":contains", and ":contains". ":matches". Match keywords type
are supplied to those commands which allow them to specify whether
the match is to be a complete match or not.

These are used as tagged arguments to tests that perform string
comparison. Exactly one of them is necessary for a command.

The ":contains" version describes a substring match. If the value
argument contains the key argument as a substring, the match is true.
For instance, the string "frobnitzm" contains "frob" and "nit", but
not "fbm". The null key ("") is contained in all values.

The ":is" version describes an absolute match; if the contents of the
first string are absolutely the same as the contents of the second
string, they match. Only the string "frobnitzm" is the string
"frobnitzm". The null key only "is" ":is" the null value.

The ":matches" version specifies a wildcard match using the
characters "*" and "?". "*" matches any number of characters, and
"?" matches a single character. "?" and "*" may be escaped as "\?"
and "\*" in strings to match against them by name.

In order to specify what type of match is supposed to happen,
commands that support matching take optional tagged arguments ":is"
":matches", ":is", and ":contains". Commands default to using ":is"
matching. Note that these modifiers may interact with comparators;
in particular, some comparators are not suitable for matching with ":contains".
":contains" or ":matches". It is an error to use a comparator with
":contains" or ":matches" that is not compatible with it.

2.6.2.

For convienence, the MATCH-TYPE syntax element is defined here as
follows:

Syntax: [ < ":is" / ":contains" / ":matches" > <key: string> ]

2.7.2. Comparisons across Character Sets

All Sieve scripts are represented in UTF-8, but messages may involve
a number of character sets. In order for comparisons to work across
character sets, implementations SHOULD implement the following
behavior:

Implementations decode header charsets to UTF-8. Two strings are
considered equal if their UTF-8 representations are identical.

Showalter Expire in Six Months [Page 13]

Internet DRAFT Sieve January 25, 1999

Implementations should decode charsets represented in the forms
specified by [MIME] for both message headers and bodies.
Implementations must be capable of decoding US-ASCII, ISO-8859-1,
the ASCII subset of ISO-8859-* character sets, and UTF-8.

If implementations fail to support the above behavior, they MUST
conform to the following:

No two strings containing 8-bit data can be considered equal.

2.7.3. Comparators

In order to allow for character set-independent matches, the match
keyword
type may be coupled with a comparator name. Comparators are
described for [ACAP]; a registry is defined for ACAP, and this
specification uses that registry.

ACAP defines multiple comparator types. Only equality types are used
in this specification.

Showalter Expires 31 Jan 1999 [Page 11]

Internet DRAFT Sieve August 7, 1998

All implementations MUST support the "i;octet" comparator, which
simply comparator (simply
compares one octet with octets) and the "i;ascii-casemap" comparator (which treats
uppercase and lowercase English characters in the next. same). If left
unspecified, the default is octet. "i;ascii-casemap".

Some comparators may not be usable with substring matches; that is,
they may only work with ":is". It is an error to try and use a
comparator with "matches" ":matches" or "contains" ":contains" that is not compatible with
it.

A comparator is specified with commands that support matching by the
":comparator" option. This option is followed by a string providing
the name of the comparator to be used. For convienence, the syntax
of a comparator is abbreviated to [COMPARATOR], and (repeated in
several tests) is as follows:

Syntax: [ ":comparator" <comparator-name: string> ]

So in this example,

Example: if header "Subject" :contains :comparator "i;ascii-casemap"
"make money fast" "i;octet" "Subject"
"MAKE MONEY FAST" {
discard;
}

would discard any message with subjects such as "Make Money Fast" and
"MaKe like "You can MAKE MONEY fAST".

OPEN: Are there any other comparators that SHOULD or MUST be
supported?

2.7. Tagged Arguments

This document provides for tagged arguments in
FAST", but not "You can Make Money Fast", since the style of
CommonLISP.

A tagged argument comparator used

Showalter Expire in Six Months [Page 14]

Internet DRAFT Sieve January 25, 1999

is not case-sensitive.

If a comparator is not known to an implementation, it is treated in
the same way as an argument for a unknown command that begins or syntax error.

Both ":matches" and ":contains" match type are compatible with
":", the
"i;octet" and consists "i;ascii-casemap" comparators and may be used with
them.

2.7.4. Comparisons against addresses

Addresses are probably one of a tag naming the argument, such most frequent representations as ":contains".
This argument means that zero
strings. Because these are structured and being able to compare
against the local-part or more of the next tokens have domain of an address is useful, some
particular meaning, depending
tests that act exclusively on addresses take an additional optional
argument that specifies what the argument. test acts on.

These next tokens may
be numbers or strings, but optional arguments are never blocks.

To keep ":localpart", ":domain", and ":all",
which act on the language simple, tagged arguments should not take tagged
arguments local-part (left-side), the domain part (right-
side), and the whole address.

The kind of comparison is done, such as arguments.

One case where this whether or not the comparison
done is useful case-insensitive, is the ":comparator" argument, which
allows the user to specify which ACAP specified as a comparator will be used argument to
compare two strings, since different languages may impose different
orderings on UTF-8 [UTF-8] characters.

Tagged arguments may appear in any order, and may be interspersed
with positional arguments.

OPEN: Perhaps tagged arguments should always be before positional
arguments.

Showalter Expires 31 Jan 1999 [Page 12]

Internet DRAFT Sieve August 7, 1998
the test.

Syntax: < ":localpart" / ":domain" / ":all" > ":localpart"

2.8. Blocks

Blocks are sets of commands enclosed within curly braces. Blocks are
supplied to commands so that the commands can implement control
structures.

So a control structure is just a command that happens to take a test
and a block as its arguments; depending on the result of the control
structure, it runs the code in the block zero or more times. (Note
that by the commands supplied in the specification, there are no
loops, so the control structures supplied--if, elsif, and else--run a
block either once or not at all.)

2.9. Commands

Sieve scripts are made up sequences of commands. Commands can take any of
the tokens above as arguments, and arguments may be either tagged or
positional arguments.

Showalter Expire in Six Months [Page 15]

Internet DRAFT Sieve January 25, 1999

A command begins with a name, which is a simple token. It ends with
either a semicolon or a block. (Commands ending with blocks are used
to implement control structures.) Commands never take both a
semicolon and a block, nor do they ever take more than one block as
an argument.

2.9.1. Positional Arguments

Positional arguments are familiar from any programming language. A
command takes zero or more untagged positional arguments in order to
specify its behavior. Positional arguments are given their value
based on their order in the command.

2.9.2. Optional Arguments

Optional arguments are tagged arguments that may be omitted; when
omitted, they are given default values.

2.9.3. Blocks as Arguments

Commands may take blocks as arguments. A block is always the last
argument to a command, and when it exists, it replaces the semicolon
that would otherwise end the command.

2.11. Evaluation

Precedence is not important in any of the commands in this base
specification. However, as an extension might make order of
operation important, all arguments to rules MUST be evaluated in

Showalter Expires 31 Jan 1999 [Page 13]

Internet DRAFT Sieve August 7, 1998

left-to-right order. Those operations that can implement short-
circuit evaluation (such as "allof" and "anyof") MUST do so.

Sieve when it exists, it replaces the semicolon
that would otherwise end the command.

2.10. Evaluation

This memo imposes specific limits on actions; for instance, a
rejected message may not also be filed into a mailbox. These
restrictions are noted on a per-command basis.

OPEN: Or rather, they should be.

2.11.1.

2.10.1. Implicit keep Keep

If evaluation of a script fails to result in one "fileinto", "keep",
or "reject", a "keep" action is implicitly taken. So the taken: The message is
filed into the user's primary mailbox; that is, mailbox.

For instance, with any of the short messages offered above, the
following script produces no actions.

Example: if size over :over 500K { discard;

3. Conditionals }

2.10.2. Extensions and Optional Features

Because of the differing capabilities of many mail systems, several
features of this specification have been specified as optional.
Before any of these extensions can be used, they must be declared

Showalter Expire in Six Months [Page 16]

Internet DRAFT Sieve January 25, 1999

with the "require" action.

If an extension is not enabled with "require", implementations MUST
treat it as if they did not support it at all.

Note: The reason for this restriction is that prior experiences with
languages such as LISP and Tcl suggest that this is a workable
way of noting that a given script uses an extension.

Experience with languages such as PostScript that have
extension mechanisms that allow a script to include
information on how to work around a lack of an extension
suggest that such mechanisms do not work well in practice.

3. Control Structures

In order for a script to do more than one set of actions, control
structures are needed. In Sieve, a control structure is a command
that takes a block as an argument.

In this document, only the "if" control structure is provided. There
are three pieces to if: "if", "elsif", and "else".

Syntax: if <test> <command> <test1: test> <block1: block>

Syntax: elsif <test> <command> <test2: test> <block2: block>

Syntax: else <block>

The semantics are similar to any other programming language this
appears in. When the interpreter sees an "if", it evaluates the test
associated with it. If the test is true, it executes the block
associated with it.

If the test of the "if" is false, it evaluates the test of the first

Showalter Expires 31 Jan 1999 [Page 14]

Internet DRAFT Sieve August 7, 1998
"elsif" (if any). If the test of "elsif" is true, it runs the
elsif's block. An elsif may be followed by an elsif, in which case,
the interpreter repeats this process until it runs out of elsifs.

When the interpreter runs out of elsifs, there may be an "else" case.
If there is, and none of the if or elsif tests were true, the
interpreter runs the else case.

This provides a way of performing exactly one of the blocks in the
chain.

Showalter Expire in Six Months [Page 17]

Internet DRAFT Sieve January 25, 1999

In the following example, both Message A and B are dropped.

Example: if header :contains "from" contains "coyote" {
discard;
} elsif :contains header ["subject"] :contains ["$$$"] {
discard;
} else {
fileinto "INBOX";
}

In the script below, when run over message A, forwards redirects the message
to acm@frobnitzm.edu; message B, to postmaster@frobnitzm.edu; any
other message is forwarded redirected to field@frobnitzm.edu.

Example: if header :contains ["From"] contains ["coyote"] {
forward
redirect "acm@frobnitzm.edu";
} else if elsif header "Subject" contains "$$$" {
forward
redirect "postmaster@frobnitzm.edu";
} else
forward {
redirect "field@frobnitzm.edu";
}

4. Actions

This document supplies six actions that may be taken on a message:
keep, fileinto, forward, redirect, reject, discard, and stop.

4.1. Action reject

Syntax: reject <reason-string> <reason: string>

The optional "reject" action resends the message to the sender,
wrapping it in a "reject" form, noting that it was rejected by the
recipient. In the following script, message A is rejected and
returned to the sender.

Example: if header :contains "from" contains "coyote@znic.net" {

Showalter Expires 31 Jan 1999 [Page 15]

Internet DRAFT Sieve August 7, 1998
reject "I am not taking mail from you, and I don't want
your birdseed, either!";
}

Showalter Expire in Six Months [Page 18]

Internet DRAFT Sieve January 25, 1999

A reject message MUST takes the form of a failed DSN as specified by
[DSN]. The human-readable portion of the message, the first
component of the DSN, contains the human readable message describing
the error, although it SHOULD contain additional text alerting the
original sender that mail was refused by a filter. This part of the
DSN might appear as follows:

------------------------------------------------------------
Message was refused by recipient's mail filtering program.
Reason given was as follows:

I am not taking mail from you, and I don't want your
birdseed, either!
------------------------------------------------------------

The action-value field as defined in the DSN specification MUST be
"failed".

A rejected message may not be filed, forwarded, redirected, or kept. A message
that triggers a "reject" action is never allowed to be kept by the
user, and the "reject" overrides all other actions.

A message may only be rejected once.

Because some implementations cannot implement the reject command, it
is optional.

4.2. Action fileinto

Syntax: fileinto <folder> <folder: string>

The "fileinto" action drops the message into a named folder.
Implementations SHOULD support fileinto, but may not be able to in
cases where the filtering agent is not able to write to the users'
folders (such as a [POP3] implementation running inside the mail
server where the folders are stored on "fileinto" action drops the users' local disks). message into a named folder.
Implementations SHOULD support fileinto, but in some environments
this may be impossible.

In the following script, message A is filed into folder
"INBOX.harassment".

Example: if header ["to"] contains :contains ["from"] "coyote" {
fileinto "INBOX.harassment";
}

4.3. Action redirect

Syntax: redirect <address: string>

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 16] 19]

Internet DRAFT Sieve August 7, 1998

4.3. Action forward

Syntax: forward <address> January 25, 1999

The "forward" "redirect" action is used to forward send the message to another user at the
a supplied address, as a mail forwarding feature does. The
"forward"
"redirect" action makes no changes to the message body or headers,
and only modifies the envelope recipient.

A simple script can be used for forwarding: redirecting:

Example: forward redirect "bart@frobnitzm.edu";

The forward redirect command performs an MTA-style forward--that "forward"--that is, what
you get from a .forward file using sendmail under UNIX. The address
on the SMTP envelope is replaced with the one on the forward redirect command
and the message is sent back out. (This is not an MUA-style forward,
which creates a new message with a different sender and message ID,
wrapping the old message in a new one.)

OPEN: At least one person rejects to this definition, claiming that
a sendmail-style forward is inherently broken. The redirect command does
not add Resent- headers.

4.4. Action keep

Syntax: keep

The "keep" action is whatever action is taken in lieu of all other
actions, if no filtering happens at all; generally, this simply means
to file the message into the user's main mailbox. This command
provides a way to execute this action without needing to know the
name of the user's main mailbox, providing a way to call it without
needing to understand the user's setup, or the underlying mail
system.

Example: if size under :under 1M { keep; } else { discard; }

4.6. Action stop

Syntax: stop

The "stop" action ends all processing. If no actions have been
executed, then the keep action is taken.

Showalter Expires 31 Jan 1999 [Page 17]

Internet DRAFT Sieve August 7, 1998

Example: [There needs to be an example here.]

4.7. Action discard

Syntax: discard

Discard drops the message. In the following script, any mail from
"idiot@frobnitzm.edu" is thrown out.

Showalter Expire in Six Months [Page 20]

Internet DRAFT Sieve January 25, 1999

Example: if header :contains ["from"] contains ["idiot@frobnitzm.edu"] {
discard; }

Discard takes no arguments.

While an important part of this language, "discard" has the potential
to create serious problems for users: A student leaving themselves
logged in to a machine in a computer lab may find their script
changed to just "discard". In order to protect users in this
situation (along with similar situations), implementations MAY keep
messages destroyed by a script for an indefinite period, and MAY
disallow scripts that throw out all mail.

4.8. Action require

Syntax: require <capabilities: string-list>

The require action notes that a script makes use of an certain
extension. Such a declaration is required to use the extension, as
discussed in section 2.10.2. Multiple capabilities can be declared
with a single require.

Example: require ["fileinto", "envelope"];

5. Tests

Tests are used in conditionals to decide which part(s) of the
conditional to execute.
5.1. execute.

5.1. Test address

Syntax: address [ADDRESS-PART] [COMPARATOR] [MATCH-KEYWORD]
<header-list: string-list> <key-list: string-list>

The address test matches Internet addresses out of structured headers
that contain addresses. It returns true if any header contains any
key in the specified part of the address, as modified by the
comparator and the match keyword.

Like envelope and header, this test returns true if any combination
of the header-list and key-list arguments match.

Internet email-addresses have the somewhat awkward characteristic

Showalter Expire in Six Months [Page 21]

Internet DRAFT Sieve January 25, 1999

that the mailbox-part [IMAIL] to the left of the at-sign is
considered case sensitive, and the domain-part to the right of the
at-sign is case insensitive. The "address" command does not deal
with this itself, but provides the ADDRESS-PART argument for allowing
users to deal with it.

The address primitive never acts on the phrase part of an email
address, nor on comments within that address. It also never acts on
group names, although it does act on the addresses within the group
construct.

Implementations MUST restrict the address test to headers that
contain addresses, but MUST include at least From, To, Cc, Bcc,
Sender, Resent-From, Resent-To, and SHOULD include any other header
that utilizes an "address-list" structured header body.

5.2. Test allof

Syntax: allof ( <test> , <test> , ... <test> <test1: test>, <test2: test>, ..., <testN: test> )

The allof test preforms a logical AND on the tests supplied to it.

Example: allof (false, false) => false
allof (false, true) => false
allof (true, true) => true

The allof test takes as its argument a test-list.

Showalter Expires 31 Jan 1999 [Page 18]

Internet DRAFT Sieve August 7, 1998

5.2.

5.3. Test anyof

Syntax: anyof ( <test> <test1: test> , <test> <test2: test> , ... <test> ..., <testN: test>
)

The anyof test preforms a logical OR on the tests supplied to it.

Example: anyof (false, false) => false
anyof (false, true) => true
anyof (true, true) => true

5.3.

5.4. Test envelope

Syntax: envelope [ADDRESS-PART] [MATCH-KIND]
<envelope-part: string-list> <key-list: string-list>

Showalter Expire in Six Months [Page 22]

Internet DRAFT Sieve January 25, 1999

The "envelope" test is true if the specified part of the RFC-822
envelope matches the specified key.

If one of the envelope-part strings is (case insensitive) "from",
then matching occurs against the FROM address used in the SMTP MAIL
command.

If one of the envelope-part strings is (case insensitive) "to", then
matching occurs against the TO address used in the SMTP RCPT command
that resulted in this message getting delivered to this user. Note
that only the most recent TO is avaliable.

The envelope-part is a string list and may contain both "from" and
"to", in which case the strings specified in the key-list are matched
against both parts of the envelope.

Like address and header, this test returns true if any combination of
the envelope-part and key-list arguments is true.

All tests against envelopes MUST drop source routes.

5.5. Test exists

Syntax: exists <header-name-list> <header-names: string-list>

The "exists" test is true if the headers listed in the
<header-name-list> header-names
argument exist within the message. All of the headers must exist or
the test is false.

The following example throws out mail that doesn't have a From header
and a Date header.

Example: if not exists :exists ["From","Date"] {
discard;
}

5.4.

5.6. Test false

Syntax: false

The "false" test always evaluates to false.

5.5.

5.7. Test header

Syntax: header <header-name-list> <match-keyword> <key-list> [COMPARATOR] [MATCH-TYPE]

Showalter Expire in Six Months [Page 23]

Internet DRAFT Sieve January 25, 1999

<header-names: string-list> <key-list: string-list>

The "header" test evaluates to true if the any header name matches
any key. How the The type of match is done is described specified by the second optional match
argument, which is one of the string comparison arguments discussed defaults to ":is" if not specified, as specified in
section 2.6. The first argument to header, the header-name-list, is a list

Like address and envelope, this test returns true if any combination
of headers to get values from to be searched. The the string-list and key-list is a list
of keys.

Showalter Expires 31 Jan 1999 [Page 19]

Internet DRAFT Sieve August 7, 1998 arguments match.

If a header listed in the header-name-list header-names argument exists, it contains
the null key (""). However, if the named header is not present, it
does not contain the null key. So if a message contained the header

X-Caffeine: C8H10N4O2

these tests on that header evaluate as follows:

header ["X-Y-Z"] is :is ["X-Caffeine"] [""] => false
header ["X-Y-Z"] contains :contains ["X-Caffeine"] [""] => true

5.6.

5.8. Test not

Syntax: not <test>

The "not" test takes some other test as an argument, and yields the
opposite result.

5.7.

5.9. Test size

Syntax: size <":over" / ":under"> <limit [quantifier]> <limit: number>

The "size" test deals with the size of a message. It takes either a
tagged argument of ":over" or ":under", followed by a number
representing the size of the message.

If the argument is ":over", and the size of the message is greater
than the number provided, the test is true; otherwise, it is false.

If the argument is ":under", and the size of the message is less than
the number provided, the test is true; otherwise, it is false.

One of ":over" or ":under" must be specified.

The size of a message is defined to be the number of octets from the
initial header until the last character in the message body.

6. Errors in Processing a Script

In any programming language, errors are inevitable. Users are
expected to make errors, and even if a script works correctly today,
it may fail tomorrow due to quotas, mailboxes being removed or
renamed, or some piece of hardware being down. It is imperative that
mail get through.

Implementations SHOULD check a script before it is run in order to
ensure that it is valid. Implementations SHOULD NOT try and recover

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 20] 24]

Internet DRAFT Sieve August 7, 1998

from a script with errors, and should instead file mail into the
user's primary mailbox.

Users MUST be notified of errors in processing a script. The method
by which users are notified is implementation defined, but a mail
message clearly describing the error is suggested if a preferable
alternative cannot be found.

In an implementation that allows for a script to be checked when it
is turned over to the server, the script can be checked for errors
before it is submitted. Implementations SHOULD notify the user of
the error and refuse to accept a syntactically invalid script or one
that makes use of extensions that the server does not report.

Implementations MUST allow mail to be filed without filtering in case
of a syntax error in the script. Implementations MUST avoid sending
multiple messages describing the same error.

Implementations are REQUIRED to notify users of errors in filtering
scripts. If there are errors in the script being used, mail SHOULD
be filed into the user's main mailbox. Implementations MUST NOT
discard mail unless a command explicitly demands it.

7. January 25, 1999

6. Extensibility

New control structures, actions, and tests can be added to the
language. Sites must make these features known to their users; this
document does not define a way to discover the list of extensions
supported by the server.

Any extensions to this language MUST define a capability string that
uniquely identifies that extension. If a new version of an extension changes
the functionality of a previously defined extension, it MUST use a
different name. The purpose of such a string is for the "support"
test, which mandates that script requires
changes the use functionality of that extension.

Additionally, in a previously defined extension, it MUST
use a different name.

In a situation where there is a submission protocol and an extension
advertisement mechanism aware of the details of this language,
scripts submitted can be checked against the mail server to prevent
use of an extension that that the server does not support.

7.1.

6.1. Capability String

Capability strings are typically short strings describing what
capabilities are supported by the server.

Capability strings beginning with "vnd." represent vendor-defined
extensions. Such extensions are not defined by Internet standards or
RFCs, but are still registered with IANA in order to prevent
conflicts. Extensions starting with "vnd." should be followed by the
name of the vendor, such as "vnd.acme.rocket-sled".

The following capability strings are defined by this document:

envelope The string "envelope" indicates that the implementation
supports the "envelope" command.

fileinto The string "fileinto" indicates that the implementation

Showalter Expires 31 Jan 1999 [Page 21]

Internet DRAFT Sieve August 7, 1998
supports filing into mailboxes. the "fileinto" command.

reject The string "reject" incidates that the implementation
supports the "reject" command.

comparator- The string "comparator-elbonia" is provided if the
implementation supports the "elbonia" comparator.
Therefore, all implementations have at least the
"comparator-i;octet" capability.

7.2.

Showalter Expire in Six Months [Page 25]

Internet DRAFT Sieve January 25, 1999

6.2. Registry

In order to provide a standard set of extensions, a registry is
provided by IANA. Capability names may be registered on a first-
come, first-served basis. Extensions designed for interoperable use
should be defined as standards track or IESG approved experimental
RFCs.

To: XXX@XXX.XXX
Subject: Registration of new Sieve extension

Capability name:
Capability keyword:
Capability arguments:
Standards Track/IESG-approved experimental RFC number:
Person and email address to contact for further information:

7.3.

6.3. Capability Transport

As the range of mail systems that this draft is intended to apply to
is quite large, a method of advertising which capabilities an
implementation supports is difficult due to the wide range of
possible implementations. Such a mechanism, however, should have the
following properties.

(1) The implementation can advertise the complete set of extensions
that it supports.

OPEN: There needs to be a more complete description here.

8. here,
suggestions appreciated.

7. Transmission

The MIME type for a SIEVE Sieve script is "application/sieve". Scripts are
encoded in UTF-8 during transmission.

Showalter Expires 31 Jan 1999 [Page 22]

Internet DRAFT Sieve August 7, 1998

8. Acknowledgments

I am very thankful to Chris Newman for his support and his ABNF
syntax checker, to John Myers and Steve Hole for outlining the
requirements for the original drafts, and to Rob Earhart for an early
implementation and a great deal of help. I am also indebted to all
of the readers of the ietf-mta-filters@imc.org mailing list.

10.

9. Formal Grammar

The grammar used in this section is the same as the ABNF described in
[ABNF].

Showalter Expire in Six Months [Page 26]

Internet DRAFT Sieve January 25, 1999

In the case of alternative or optional rules in which a later rule
overlaps an earlier rule, the rule which is listed earlier MUST take
priority. (This shouldn't happen. Please let me know if it does.)

The start symbol for this grammar is "start".

argument = string / string-list / number / tag / test

block = "{" [WSP] commands [WSP] "}"
;; C-style block

CHAR-NOT-DOT = (%x01-2d / %x2f-%xff)
;; all the characters that aren't "."

command = identifier WSP *(argument WSP) *(WSP argument) [WSP] ( ";" / block )

commands = *([WSP] command [WSP])

comment = "#" *VCHAR CRLF

identifier = (ALPHA / "_") *(ALPHA DIGIT "_")

multi-line = "text:" [WSP] CRLF
*((1*CHAR-NOT-DOT *CHAR CRLF) / ("." 1*CHAR-NOT-DOT *CHAR CRLF) /
(".." *CHAR CRLF) / CRLF)
"." CRLF
;; Note when used,
;; a leading ".." on a line is mapped to ".".

number = 1*DIGIT [QUANTIFIER]
;; quantifier is a multiplier (or bit shift)

QUANTIFIER = "K" / "M" / "G"
;; K == 2^10; M == 2^20; G = 2^30

quoted-string = DQUOTE *CHAR DQUOTE
;; \" inside a string maps to "

Showalter Expires 31 Jan 1999 [Page 23]

Internet DRAFT Sieve August 7, 1998
;; \\ inside a string maps to \
;; All other characters map to themselves.
;; Note that newlines and other weird characters
;; are all allowed strings.

start = commands

string = quoted-string / multi-line

string-list = "[" [WSP] *(string [WSP] "," [WSP]) string *([WSP] "," [WSP] string) [WSP] "]" / string
;; if there is only a single string, the brackets are optional

Showalter Expire in Six Months [Page 27]

Internet DRAFT Sieve January 25, 1999

tag = ":" identifier

test = identifier *(WSP argument) [WSP test-list]

test-list = [WSP] "(" [WSP] *(test [WSP] "," [WSP])
test [WSP] ")" [WSP]

WSP = 1*(SP / CRLF / HTAB) / comment
;; just whitespace. anyplace this is allowed, a comment is
;; as well

11.

10. Security Considerations

Users must get their mail. It is imperative that whatever method
implementations use to store the user-defined filtering scripts be
secure.

It is equally important that implementations sanity-check the user's
scripts, and not allow users to create on-demand mailbombs. For
instance, an implementation that allows a user to reject or forward redirect
multiple times to a single message might also allow a user to create
a mailbomb triggered by mail from a specific user.

Therefore, an implementation SHOULD only allow one "reject" per
message processed, and MAY limit the number of forward redirect actions
taken. An implementation MUST refuse to forward redirect a message to
itself. [OPEN: What do you do when a site limit prevents you from
this? Say I do three replies; which ones take effect when the limit
is 1? 2? 0?]

Several commands, such as "discard", "forward", "redirect", and "fileinto" allow
for actions to be taken that are potentially very dangerous.

12.

In order to prevent mail loops, an implementation MUST refuse to
filter a message that it has already filtered once; that is, a
message must not pass through a given server twice.

11. Author's Address

Tim Showalter
Carnegie Mellon University
5000 Forbes Avenue
Pittsburgh, PA 15213

Showalter Expires 31 Jan 1999 [Page 24]

Internet DRAFT Sieve August 7, 1998

E-Mail: tjs+@andrew.cmu.edu

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 25] 28]

Internet DRAFT Sieve August 7, 1998

Appendices January 25, 1999

Appendix A. References

[ABNF] Crocker, D., and P. Overell, "Augmented BNF for Syntax
Specifications: ABNF", Internet Mail Consortium, RFC 2234, November
1997.

[DSN] Moore, K., and G. Vaudreuil, "An Extensible Message Format for
Delivery Status Notifications", RFC 1894, January 1996.

[FLAMES] Borenstein, Nathaniel S., N, and Chris A. C. Thyberg, "Power, Ease of Use, and
Cooperative Work in a Practical Multimedia Message System", Int. J.
of Man-Machine Studies, April, 1991. Reprinted in Computer-Supported
Cooperative Work and Groupware, Saul Greenberg, editor, Harcourt
Brace Jovanovich, 1991. Reprinted in Readings in Groupware and
Computer-Supported Cooperative Work, Ronald Baecker, editor, Morgan
Kaufmann, 1993.

[KEYWORDS] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", RFC 2119, Harvard University, March 1997.

[IMAP] Crispin, M., "Internet Mail Message Access Protocol - version
4rev1", RFC 2060, University of Washington, December 1996.

[IMAIL] Crocker, D., "Standard for the Format of ARPA Internet Text
Messages", STD 11, RFC 822, University of Delaware, August 1982.

[MIME] Freed, N., and N. Borenstein, "Multipurpose Internet Mail
Extensions (MIME) Part One: Format of Internet Message Bodies", RFC
2045, Innosoft and First Virtual, November 1996.

[SMTP] Postel, J., "Simple Mail Transfer Protocol", STD 10, RFC 821,
USC/Information Sciences Institute, August 1982.

[UTF-8] Yergeau, F. "UTF-8, a transformation format of Unicode and
ISO 10646", RFC 2044, Alis Technologies, October 1996.

Showalter Expire in Six Months [Page 29]

Internet DRAFT Sieve January 25, 1999

Appendix B. Full Copyright Statement

This document and translations of it may be copied and furnished to
others, and derivative works that comment on or otherwise explain it
or assist in its implementation may be prepared, copied, published
and distributed, in whole or in part, without restriction of any
kind, provided that the above copyright notice and this paragraph are

Showalter Expires 31 Jan 1999 [Page 26]

Internet DRAFT Sieve August 7, 1998
included on all such copies and derivative works. However, this
document itself may not be modified in any way, such as by removing
the copyright notice or references to the Internet Society or other
Internet organizations, except as needed for the purpose of
developing Internet standards in which case the procedures for
copyrights defined in the Internet Standards process must be
followed, or as required to translate it into languages other than
English.

The limited permissions granted above are perpetual and will not be
revoked by the Internet Society or its successors or assigns.

This document will expire before January 31, 1999.

Showalter Expires 31 Jan 1999 Expire in Six Months [Page 27] 30]

----