Recently, Somebody Somewhere wrote these words
> This number should now resolve to the correct host (a simple change in
> my client configuration) . If SA still calls the helo forged, then
> I'll have to dig a little deeper. 

We still fail on the FORGED_HELO test. Here's why:

Received: from [24.148.198.211] (helo=www.ccolton.com)
     by smtpauth04.mail.atl.earthlink.net with asmtp (TLSv1:RC4-MD5:128)
        (Exim 4.34)
        id 1DcPov-0005qd-9D
        for [EMAIL PROTECTED]; Sun, 29 May 2005 11:35:21 -0400
From: Craig Colton <[EMAIL PROTECTED]>


Who said HELO? www.ccolton.com, or was it really earthlink.net, and
should it have been bellsouth.net ? You want _LESS_ domains in there,
not more
> 
> > > I have a theory, but I haven't checked it out yet. I _do_ have a
> > > FQDN - www.ccolton.com. And if my system is working right, it
> > > should be assigned dynamically to my earthlink IP no.

PING www.ccolton.com (24.148.198.211): 56 data bytes
64 bytes from 24.148.198.211: icmp_seq=0 ttl=48 time=131.353 ms
64 bytes from 24.148.198.211: icmp_seq=1 ttl=48 time=129.899 ms
64 bytes from 24.148.198.211: icmp_seq=2 ttl=48 time=146.602 ms
--- www.ccolton.com ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 129.899/135.951/146.602/7.555 ms

[EMAIL PROTECTED] ~]# whois www.ccolton.com
No match for "WWW.CCOLTON.COM".


There are different types of record for a domain. Ping uses one. The
one relating to mail is the MX record. These are looked up on the fly by
spamassassin. I have copied this to the list so as the mail geniuses
there can straighten us both out, but I think it falls this way.

If you look for an ip for somebox.somewhere.org, a .org server
will be asked. It will probably say "Ask your local .org server [IP]"

You ask the local one, and It will say " ask somewhere.org [IP]"

Then the software will ask somewhere.org, and it will have to
have a record for somebox. No other record in the world greatly matters.

If your mail identified as being from bellsouth.net, there would be no
issue. That's your email address. It identifies as www.ccolton.com. FIX
THAT! You don't have to change hostname, or domain name. Just tell your
mail software that your box is to identify as bellsouth.net, and see if
earthlink still accepts the mail.


--

        With best Regards,


        Declan Moriarty.
-- 
http://linuxfromscratch.org/mailman/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to