[RFCI-Discuss] DSN listing of secureserver.net

Matus UHLAR - fantomas uhlar at fantomas.sk
Wed Oct 25 04:40:19 EDT 2006


> On Tue, 24 Oct 2006, T wrote:
> > For the record, a lot of SPF configurations don't realize that HELO do
> > matter in th case of null <> sends and that "brain dead" behavior is
> > actually probably per spec and totally correct.

On 25.10.06 03:56, Alan Brown wrote:
> Which raises the issue that RFC 821/822 stats that HELOs need not bear
> any relationship to the actual hostname - as long as they're
> syntactically valid.

where? Imho statement 3.5 of rfc821 says just the opposite.

> > That sorta means, you probably have not configured the SPF records for
> > the hostnames you use in your HELO greets

That was me having the problem (spf was set, but denying all). Fixed now.

> > While for the longest time, it thought it annoying that all hotmail
> > servers used "hotmail.com" in their HELOs not quite to the spirt of
> > RFCs
> 
> But entirely within the meaning of them.
> 
> The RFCs are quite clear that messages MUST NOT be rejected on the basis
> of HELO not matching the connecting hostname.
> 
> >(individual servers weren't identifiable)
> 
> HELOs aren't intended for individual server identification and never were.

I doubt they knew they will start using SPF. But I think they changed HELO
strings fto full host names because of "hotmail.com" being rejected on too
many hosts (many viruses and spams used such helo).

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
10 GOTO 10 : REM (C) Bill Gates 1998, All Rights Reserved!


More information about the RFCI-Discuss mailing list