From: Florian <ts...@ag...> - 2007-06-07 01:24:33
|
Hello List, i installed fetchmail 6.3.8+SSL on Trustix. Fetching of Mails works, but delivering the mails crashes: fetchmail: SMTP< 220 mail.mydomain.de ESMTP Postfix fetchmail: SMTP> EHLO myhostname fetchmail: SMTP< 250-mail.mydomain.de fetchmail: SMTP< 250-PIPELINING fetchmail: SMTP< 250-SIZE 10240000 fetchmail: SMTP< 250-VRFY fetchmail: SMTP< 250-ETRN fetchmail: SMTP< 250 8BITMIME fetchmail: SMTP> MAIL FROM:<yy...@zz...> BODY=7BIT SIZE=1020 fetchmail: SMTP< 250 Ok fetchmail: SMTP> RCPT TO:<xx...@my...> fetchmail: SMTP< 450 <myhostname>: Helo command rejected: Host not found fetchmail: SMTP error: 450 <myhostname>: Helo command rejected: Host not found fetchmail: SMTP> RSET fetchmail: SMTP< 250 Ok How can the HELO/EHLO string be changed? According to rfc 2821 i'd like use the fqdn "myhostname.mydomain.de" as EHLO-String. "4.1.1.1 Extended HELLO (EHLO) or HELLO (HELO) [...] The argument field contains the fully-qualified domain name of the SMTP client if one is available." Thanks in advance, Florian |
From: Rob M. <rob...@gm...> - 2007-06-07 08:01:42
|
On 6/7/07, Florian <ts...@ag...> wrote: > Hello List, > > i installed fetchmail 6.3.8+SSL on Trustix. > Fetching of Mails works, but delivering the mails crashes: Contents of .fetchmailrc? In my case, presumably because I've used "set invisible" I see "EHLO <remote server>". If I don't set that then I see "EHLO <hostname>". > How can the HELO/EHLO string be changed? Change the system's hostname, ie so that "hostname" provides "myhostname.mydomain.de" rather than just "myhostname". > According to rfc 2821 i'd like use the fqdn "myhostname.mydomain.de" as > EHLO-String. > > "4.1.1.1 Extended HELLO (EHLO) or HELLO (HELO) > [...] The argument field contains the fully-qualified domain name > of the SMTP client if one is available." Given how few clients actually obey that, if you expect any clients to connect to that server it's probably best to relax that check. -- Please keep list traffic on the list. Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche |
From: Rob F. <rf...@fu...> - 2007-06-07 08:44:03
|
Rob MacGregor wrote: > On 6/7/07, Florian <ts...@ag...> wrote: > > "4.1.1.1 Extended HELLO (EHLO) or HELLO (HELO) > > [...] The argument field contains the fully-qualified domain name > > of the SMTP client if one is available." > > Given how few clients actually obey that, if you expect any clients to > connect to that server it's probably best to relax that check. In my experience it's actually best to relax it for yourself and authenticated (initial-submit) users, but enforce it for random internet clients. That blocks a lot of spam while still allowing the broken clients that are OK to be broken. Similarly, it's quite useful to have the MTA to block outside clients who use the *server's* FQDN in the HELO. Amazing how much spam that blocks without losing legitimate mail. -- ==============================| "A microscope locked in on one point Rob Funk <rf...@fu...> |Never sees what kind of room that it's in" http://www.funknet.net/rfunk | -- Chris Mars, "Stuck in Rewind" |
From: Dave C. <dc...@do...> - 2007-06-07 09:22:43
|
Hi, I don't want to hijack the "Re: [fetchmail-users] change helo/ehlo" thread, but I would like to ask a question about something raised there. Rob MacGregor wrote: > Change the system's hostname, ie so that "hostname" provides > "myhostname.mydomain.de" rather than just "myhostname". > I have never really understood how this works. Surely "mydomain.de" would have to be registered first? If I arbitrarily select a domain for my internal network, say "baynet.com", and there exists a registered URL on the web of the same name, isn't there scope for confusion? In fact, I have a machine on my network just called "Janus" and if I put that into my browser I frequently get "https://ww3.janus.com/Janus/Retail/HomePage". -- Dave Coventry Tel (home): +27(0)31 3092301 Tel (office): +27(0)31 2058448 Cell: +27(0)82 9000179 |
From: Florian <ts...@ag...> - 2007-06-07 08:55:16
|
Rob MacGregor schrieb: > On 6/7/07, Florian <ts...@ag...> wrote: > >> Hello List, >> >> i installed fetchmail 6.3.8+SSL on Trustix. >> Fetching of Mails works, but delivering the mails crashes: >> > > Contents of .fetchmailrc? > > In my case, presumably because I've used "set invisible" I see "EHLO > <remote server>". If I don't set that then I see "EHLO <hostname>". > poll pop.gmx.net proto pop3 user "myf...@gm..." password "password" is "my...@my..." fetchall fetchmail ist called for testing just with : "fetchmail -v" I'll try the "set invisible" >> How can the HELO/EHLO string be changed? >> > > Change the system's hostname, ie so that "hostname" provides > "myhostname.mydomain.de" rather than just "myhostname". > The system has several ip-addresses. Every ip-address corresponds to an valid name in the DNS (forward and reverse). I'd like to use one of these names for fetchmail-EHLO. Is there a onfig-value for customizing the EHLO-String? Can fetchmail be bound to a certail outgoing interface (like e.g. postfix : smtp_bind_address)? How is the EHLO-String determined? >> According to rfc 2821 i'd like use the fqdn "myhostname.mydomain.de" as >> EHLO-String. >> >> "4.1.1.1 Extended HELLO (EHLO) or HELLO (HELO) >> [...] The argument field contains the fully-qualified domain name >> of the SMTP client if one is available." >> > > Given how few clients actually obey that, if you expect any clients to > connect to that server it's probably best to relax that check. > I use this check for Spam protection and it works very well! You are right, that this is a source for false-positives ;-( I'd like to form my own outgoing traffic in an rfc-conform manner. Florian |
From: Rob M. <rob...@gm...> - 2007-06-07 13:58:20
|
On 6/7/07, Florian <ts...@ag...> wrote: > > The system has several ip-addresses. Every ip-address corresponds to an > valid name in the DNS (forward and reverse). I'd like to use one of > these names for fetchmail-EHLO. > Is there a onfig-value for customizing the EHLO-String? See below :) > Can fetchmail be bound to a certail outgoing interface (like e.g. > postfix : smtp_bind_address)? No. > How is the EHLO-String determined? As I said, it appears to be determined from the system's hostname - ie the output of the "hostname" command. -- Please keep list traffic on the list. Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche |
From: Rob F. <rf...@fu...> - 2007-06-07 09:39:53
|
Dave Coventry wrote: > Rob MacGregor wrote: > > Change the system's hostname, ie so that "hostname" provides > > "myhostname.mydomain.de" rather than just "myhostname". > > I have never really understood how this works. Surely "mydomain.de" > would have to be registered first? Not if you pick one that can't be registered, e.g. mydomain.local. > If I arbitrarily select a domain for my internal network, say > "baynet.com", and there exists a registered URL on the web of the same > name, isn't there scope for confusion? Yes. Don't do that. Pick a name that *can't* match one of the (relatively) few top-level domains (.org, .com, .net, .info, .museum, and some others, plus the country codes like .de and .us). Or even better, register your own domain and make a local subdomain under that. :-) > In fact, I have a machine on my network just called "Janus" and if I > put that into my browser I frequently get > "https://ww3.janus.com/Janus/Retail/HomePage". Yeah, browsers expect at least a fully-qualified domain name (e.g. janus.com), and if you just type a bare machine name the browser will start guessing top-level domains (.com, .org., .net). If you want your local machine you need to make that unambiguous by setting up a local domain (and probably local DNS) and using that. -- ==============================| "A microscope locked in on one point Rob Funk <rf...@fu...> |Never sees what kind of room that it's in" http://www.funknet.net/rfunk | -- Chris Mars, "Stuck in Rewind" |
From: Dave C. <dc...@do...> - 2007-06-08 23:13:48
|
Rob Funk wrote: > Dave Coventry wrote: > >> Rob MacGregor wrote: >> >>> Change the system's hostname, ie so that "hostname" provides >>> "myhostname.mydomain.de" rather than just "myhostname". >>> >> I have never really understood how this works. Surely "mydomain.de" >> would have to be registered first? >> > > Not if you pick one that can't be registered, e.g. mydomain.local. > I'm assuming that it does not need to have .com or .de? I mean the British domain names are .co.uk, or org.uk or .me.uk or .gov.uk, would these work okay? Could I make one up, say .dave.uk? What is the program looking for in a FQDN? > Or even better, register your own domain and make a local subdomain under > that. :-) > How do you mean? If I have registered the domain name localbuz.com, surely the DNS system locates that to a particular server on the web. When you say subdomain, presumably you mean something like baynet.localbuz.com? Would it be possible to locate this on another server? Many thanks, -- Dave Coventry Tel (home): +27(0)31 3092301 Tel (office): +27(0)31 2058448 Cell: +27(0)82 9000179 |
From: Rob F. <rf...@fu...> - 2007-06-08 23:27:01
|
Dave Coventry wrote: > Rob Funk wrote: > > Dave Coventry wrote: > >> I have never really understood how this works. Surely "mydomain.de" > >> would have to be registered first? > > > > Not if you pick one that can't be registered, e.g. mydomain.local. > > I'm assuming that it does not need to have .com or .de? In fact it Should not. > I mean the > British domain names are .co.uk, or org.uk or .me.uk or .gov.uk, would > these work okay? Could I make one up, say .dave.uk? No. That would be Bad. You Must use some other namespace. That's why I suggested ".local". > What is the program > looking for in a FQDN? Multiple domain parts separated by periods. Each domain part is a string consisting of letters, numbers, or hyphens. > > Or even better, register your own domain and make a local subdomain > > under that. :-) > > How do you mean? If I have registered the domain name localbuz.com, > surely the DNS system locates that to a particular server on the web. The domain name is separate from the machine name. I have funknet.net registered, so I can use whatever names I want within that. In DNS, www.funknet.net points to one server, www2.funknet.net points to another, and mail.funknet.net points to another. And in my private network I can use whatever funknet.net names I want that don't conflict with the others I've set. > When you say subdomain, presumably you mean something like > baynet.localbuz.com? Depends on the meaning of "like" there. In my home network I use the subdomain local.funknet.net, so for example right now I'm using the machine hactar.local.funknet.net. > Would it be possible to locate this on another > server? Servers are different from domains. Servers are given names within domains. A domain can contain many servers. (I have another machine at home called marvin.local.funknet.net.) Of course, a single server can also answer to multiple names or even multiple domains, but that's a story for another time. -- ==============================| "A microscope locked in on one point Rob Funk <rf...@fu...> |Never sees what kind of room that it's in" http://www.funknet.net/rfunk | -- Chris Mars, "Stuck in Rewind" |
From: Dave C. <dc...@do...> - 2007-06-09 00:02:02
|
Thanks for your help on this, Rob, I hope we haven't strayed too far Off Topic... Rob Funk wrote: > The domain name is separate from the machine name. I have funknet.net > registered, so I can use whatever names I want within that. In DNS, > www.funknet.net points to one server, www2.funknet.net points to another, > and mail.funknet.net points to another. > And in my private network I can use whatever funknet.net names I want that > don't conflict with the others I've set. > > >> When you say subdomain, presumably you mean something like >> baynet.localbuz.com? >> > > Depends on the meaning of "like" there. > > In my home network I use the subdomain local.funknet.net, so for example > right now I'm using the machine hactar.local.funknet.net. > > >> Would it be possible to locate this on another >> server? >> > > Servers are different from domains. Servers are given names within > domains. A domain can contain many servers. (I have another machine at > home called marvin.local.funknet.net.) > > Of course, a single server can also answer to multiple names or even > multiple domains, but that's a story for another time. > > Okay, I've registered localbuz.com and the DNS links the domain name to my hosting company's server. If I have a machine in my office called bayserver.localbuz.net, I take it that there is no link between the two? Anybody looking for bayserver.localbuz.com would not find it because there would be no DNS link? And that the only reason I would want to do this is to provide programs like fetchmail and postfix with a point of reference? -- Dave Coventry Tel (home): +27(0)31 3092301 Tel (office): +27(0)31 2058448 Cell: +27(0)82 9000179 |