In T249014#6015881, @Aklapper wrote:

Hi @Rehman, thanks for taking the time to report this! Could you attach an example email including full mail headers (and make sure to obfuscate/replace any personal data like IP addresses or email addresses, as Phabricator is a public place)?
Or if you don't want that, could you forward such an email (including its full mail headers) to my email address? Thanks!

Hi @Aklapper , I've forwarded the whole email to you. Does it contain the needed information?

Duplicate of T232199?

Indeed something seems wrong on the Wikimedia side, as the sender address shows mw1337.eqiad.wmn as domain. (And something went wrong when it comes to the character encoding of the email body, but if you don't see that problem I guess something went wrong when you exported that email.)

Good spot, I didn't notice the characters in the email body.

I've retried copying again, it seems like the characters display properly in the email body, but converts to those odd symbols in the 'view source' window which I've mentioned to you on email. Not too sure if this is supposed to be normal behaviour.

(If you copied and pasted something from somewhere, instead of directly *saving* the full email, then there will nearly always be issues.)

In T249014#6018521, @Aklapper wrote:

(If you copied and pasted something from somewhere, instead of directly *saving* the full email, then there will nearly always be issues.)

Sorry I wasn't clear. The odd symbols are visible before copying, in the original email source.

@Rehman Thanks for reporting. I can reproduce the error.

First of all, don't be alarmed- this is looks just like an interface error. The 1337 doesn't mean anything was compromised, it look just a random application server writing the email (sending the server name instead of the normal address). For example, I received an email with the following from:

විකිපීඩියා@mw1321.eqiad.wmnet, නිදහස් විශ්වකෝෂය <wiki@wikimedia.org>

Please confirm this translates or transliterates to
wikipedia@mw1321.eqiad.wmnet, The free Encyclopedia

mw1321.eqiad.wmnet is public information and can be even seen on every page rendering's source code.

While SRE was added to this ticket, and I cannot discard an email issue, it is likely and I would search for the issue on one of these 2 areas first:

• A bug on internationalization (translation) for Sinhalese language: probably the wrong translation was imported into the wiki recently, causing it to write the hostname of the server when sending an email.
• A bug on configuration for siwiki

Language-Team could you help us understand if a bad translation was merged recently for the SI language, causing bad email froms to be sent?

Of course please re add operations if the issue is not there or on mediawiki-configuration.

wmf-config/VariantSettings.php  'siwiki' => 'විකිපීඩියා, නිදහස් විශ්වකෝෂය',

On the other hand, I can see the above configuration for the name of the wiki, which I may be wrong (obviously I am not a speaker), but doesn't look right to me (does it really need the comma on the title for the short name?

Change 585509 had a related patch set uploaded (by Jcrespo; owner: Jcrespo):
[operations/mediawiki-config@master] InitializeSettings: Update site name for siwiki, causes formatting issues

https://gerrit.wikimedia.org/r/585509

Could someone with the language knowledge (in addition to someone with Mediawiki configuration knowledge :-)) would know if the above patch makes sense?

Change 585509 merged by jenkins-bot:
[operations/mediawiki-config@master] [siwiki] Change wgSitename to drop the ',' as it causes formatting issues

https://gerrit.wikimedia.org/r/585509

Mentioned in SAL (#wikimedia-operations) [2020-04-02T16:32:58Z] <jforrester@deploy1001> Synchronized wmf-config/InitialiseSettings.php: T249014 [siwiki] Change wgSitename to drop the ',' (duration: 01m 07s)

Mentioned in SAL (#wikimedia-operations) [2020-04-02T16:33:07Z] <jforrester@deploy1001> sync-file aborted: T249014 [siwiki] Change wgSitename to drop the ',' (duration: 00m 00s)

Confirmed fixed: