Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #196049

Re: reportbug - debian SMTP HELO forged

From Alessandro Vesely <vesely@tana.it>
Newsgroups linux.debian.user
Subject Re: reportbug - debian SMTP HELO forged
Date 2018-05-24 19:30 +0200
Message-ID <vT2dP-3q9-5@gated-at.bofh.it> (permalink)
References <vSMC5-1SV-1@gated-at.bofh.it> <vSN57-2il-3@gated-at.bofh.it> <vSNot-2oH-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Thu 24/May/2018 03:33:52 +0200 bw wrote: 
> On Thu, 24 May 2018, Ben Caradoc-Davies wrote:
>> On 24/05/18 12:40, bw wrote:
>>> Okay, I must have something misconfigured.

Yes, ~/.reportbugrc

>>> [...]
>>> Connecting to packages.debian.org via SMTP...
>>> SMTP send failure: {'menu@packages.debian.org': (550, b'HELO mismatch
>>> Forged HELO for ([127.0.0.1])')}.

That message was issued by the Debian SMTP server.

[127.0.0.1] is a typical client HELO.  In particular, it is what you get by:

   printf 'import socket\nprint socket.getfqdn()\n'|python

Submission clients later authenticate using a password, a certificate, or a
well known (to the server) IP address.  Email submission is different from
server relaying, where authentication can use SPF HELO, DKIM, and the like.

You should send mail through Yahoo! mail submission service, like Ben exemplified:

>> I send mail via my mail hosting provider's MTA to ensure HELO matches.
>> 
>> This is my ~/.reportbugrc, rewritten to use your address and the Yahoo SMTP
>> server. You can also try port 465 if this does not work:
>> 
>> [...]
>> smtphost "smtp.mail.yahoo.com:587"
>> smtptls
>> smtpuser "bwtnguy@yahoo.com"
>> smtppasswd "YOUR_YAHOO_PASSWORD_GOES_HERE"

(I only kept the lines describing the SMTP host connection)

> smtphost reportbug.debian.org

The above line triggers special hacks to allow the so called direct-to-mx
sending, an unauthenticated technique chiefly used by spammers.  It may work if
you configure your sockets so as to mimic a credible mail server.  That is,
have the above command return a FQDN, possibly resolving to the IP address
you're going to use.  However, that technique supports neither external CC:
addresses nor copy-to-sent-folder.

hth
Ale

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

reportbug - debian SMTP HELO forged bw <bwtnguy@yahoo.com> - 2018-05-24 02:50 +0200
  Re: reportbug - debian SMTP HELO forged Ben Caradoc-Davies <ben@transient.nz> - 2018-05-24 03:20 +0200
    Re: reportbug - debian SMTP HELO forged bw <bwtnguy@yahoo.com> - 2018-05-24 03:40 +0200
      Re: reportbug - debian SMTP HELO forged Ben Caradoc-Davies <ben@transient.nz> - 2018-05-24 04:00 +0200
      Re: reportbug - debian SMTP HELO forged Alessandro Vesely <vesely@tana.it> - 2018-05-24 19:30 +0200

csiph-web