On 30/09/03 21:07 +0530, Payal Rathod wrote:
> On Tue, Sep 30, 2003 at 07:09:04PM +0530, Suresh Ramasubramanian wrote:
> > G.Vinubalaji [9/30/2003 7:19 PM] :
> > 
> > >Finally my mails are getting through after i requested for a change in
> > >the EHLO configuration option of my company qmail installation.
> > 
> > Good for you.  HELO filtering traps a TON of spam - and we use it 
> > extensively.
> 
> No. I repeat again. Filter based on just HELO is bad. I would suggest
The RFC mandates that the HELO/EHLO MUST be a FQDN. If you are not RFC
compliant, I suggest fixing the problem at your end.

> Suresh you also don't use it. Come on Suresh, you mean to say I on
> dial-up cannot send you any mails. That is bad.
Eh? You do realise that Suresh handles a few million mailboxes, right?
And that they REJECT a lot of spamware which is broken?

> > A clear PERMFAIL 5xx is issued.  What do you mean the mail is denied but 
> > not bounced back?
> 
> I think the mail is *rejected* at SMTP level so no question of bouncing
> it back. It depends on his MTA what to do with the *rejected* mail.
Correct. His MTA has to generate the bounce.
 
> > Sourceforge does a few other things.
> > 
> > 1. Checks for a proper HELO - syntactically correct (underscores are not 
> > valid in HELO for example)
> 
> hmmm.
> 
> > 2. Makes a smtp callback (connects back to the sending domain's MX and 
> > verifies if ... 1. the user sending it exists, 2. [EMAIL PROTECTED] 
> > exists)... only then does it let your mail through.
> 
> ugghhhh. Is sourceforge serious? You mean it will connect to my domain
> and actually use the VRFY verb to check if my email address / username exists?
VRFY? No. It will connect to your MX and try a 
mail from: <[EMAIL PROTECTED]>
rcpt to: <[EMAIL PROTECTED]>
If it doesn't get a 250 response, then Sourceforge will not accept the
mail. There is no reason to accept a mail that cannot be bounced.

> My MTA would NEVER allow that. If it did it would be a bonanza for
> spammers just verify address and do it. I think no modern MTA should
> ever do this.
You don't need VRFY.

> p.s. are you the "middle-class system administrator"
Yes. He is. 

Devdas Bhagat


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to