Date: Sun, 10 Apr 2016 13:00:48 -0700 From: David Wolfskill <david@catwhisker.org> To: Dominic Fandrey <kami@freebsd.org> Cc: freebsd-test@freebsd.org, postmaster@freebsd.org Subject: Re: testmail Message-ID: <20160410200048.GD1226@albert.catwhisker.org> In-Reply-To: <1460316757.71105.3.camel@freebsd.org> References: <1460316757.71105.3.camel@freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--C1iGAkRnbeBonpVg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sun, Apr 10, 2016 at 09:32:37PM +0200, Dominic Fandrey wrote:
> 123 test
> ....
OK; here we have the "Requirements for sending mail through mx1":
The SMTP server in this case, mx1.freebsd.org, is set up so that it
requires:
=20
* the IP address of the SMTP client must "reverse-resolve" to a
hostname and
=20
* the hostname thus obtained must resolve to a set of IP addresses,
one of which must match the IP address of the client and
=20
* the (fully-qualified) hostname given in the SMTP conversation
(either HELO or EHLO) must resolve a set of IP addresses, one of
which must match the IP address of the client.
And here's the Received header for the handoff to mx1:
Received: from mail.server1.bsdforen.de (bsdforen.de [82.193.243.81])
by mx1.freebsd.org (Postfix) with ESMTP id 48AFB1283
for <postmaster@freebsd.org>; Sun, 10 Apr 2016 19:33:57 +0000 (UTC)
(envelope-from kami@freebsd.org)
The SMTP client using IPv4 address 82.193.243.81 identified itself as
"mail.server1.bsdforen.de", but:
root@mx1:/var/log # host mail.server1.bsdforen.de
Host mail.server1.bsdforen.de not found: 3(NXDOMAIN)
root@mx1:/var/log #=20
So that contravenes the 3rd point (re: HELO or EHLO).
The rest looks OK:
root@mx1:/var/log # host bsdforen.de
bsdforen.de has address 82.193.243.81
bsdforen.de has IPv6 address 2a01:a380:4408:a003::2
bsdforen.de mail is handled by 20 bsdforen.de.
root@mx1:/var/log # host 82.193.243.81
81.243.193.82.in-addr.arpa domain name pointer bsdforen.de.
root@mx1:/var/log #=20
So if an A record could be created for mail.server1.bsdforen.de
(with the value "82.193.243.81", that should make things work
properly.
Or if the SMTP client could be persuaded to identify itself merely
as "bsdforen.de", that would also work.
Finally, if neither of these is feasible within a reasonable time
period, we (postmaster@) could "whitelist" mail.server1.bsdforen.de
-- but the DNS stuff really ought to be addressed at some point.
Peace,
david (current hat: part of postmaster@freebsd.org)
--=20
David H. Wolfskill david@catwhisker.org
Those who would murder in the name of God or prophet are blasphemous coward=
s.
See http://www.catwhisker.org/~david/publickey.gpg for my public key.
--C1iGAkRnbeBonpVg
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=
=Q2/A
-----END PGP SIGNATURE-----
--C1iGAkRnbeBonpVg--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160410200048.GD1226>