Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #229107

Re: Why use an email client AND sendmail/popa3d - Does this avoid the hijack?

From Joe <joe@jretrading.com>
Newsgroups linux.debian.user
Subject Re: Why use an email client AND sendmail/popa3d - Does this avoid the hijack?
Date 2020-11-26 10:40 +0100
Message-ID <BflUS-32R-17@gated-at.bofh.it> (permalink)
References <BeaIa-OQ-3@gated-at.bofh.it> <BeiZ3-5Ti-1@gated-at.bofh.it> <BeZ7X-66a-9@gated-at.bofh.it> <BfgBQ-8aD-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Wed, 25 Nov 2020 21:57:10 -0600
David Wright <deblis@lionunicorn.co.uk> wrote:


> Perhaps the problem is similar to the one I had with this list
> (hence the change I made above). What happened was that my posts'
> Envelope-from (set to the same as my From address above) was being
> changed by my mail hosting service to an address on their outgoing
> mail gateway. AIUI Debian immediately tries to establish an email
> connection to that address on port 25 to verify it exists, but the
> outgoing gateway apparently is not an incoming mail receiver, and
> is not listening on port 25. So Debian rejects the post.
> 

There should/need be no Envelope-From header in an email as sent, it is
inserted by the receiving SMTP server as a copy of the sending address
as used in the SMTP transaction, something which is not a sent header
and that would not otherwise be available to the end recipient.

An SMTP sending server does not need to also receive email. Large
businesses often use separate servers for send and receive, and often
contract out one or both functions to different companies e.g. mass
mailers and spam cleaning services. It should not be assumed that the
MX record for a domain matches its sending address.

What Debian's mail server might well do is to look up the sending
server's HELO/EHLO, sending address and IP address in public DNS, and
refuse or delay emails with missing or incorrect records. Exim4 by
default has rules (thought not enabled by default) for checking these
things with a view to refusing transactions with spammers.

-- 
Joe

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Why use an email client AND sendmail/popa3d - Does this avoid the  hijack? Keith Bainbridge <ke1thozgroups@gmx.com> - 2020-11-23 04:30 +0100
  Re: Why use an email client AND sendmail/popa3d - Does this avoid  the hijack? David Wright <deblis@lionunicorn.co.uk> - 2020-11-23 06:40 +0100
    Re: Why use an email client AND sendmail/popa3d - Does this avoid the hijack? John Hasler <jhasler@newsguy.com> - 2020-11-23 17:00 +0100
      Re: Why use an email client AND sendmail/popa3d Keith Bainbridge <ke1thozgroups@gmx.com> - 2020-11-25 01:10 +0100
    Re: Why use an email client AND sendmail/popa3d Keith Bainbridge <ke1thozgroups@gmx.com> - 2020-11-24 23:40 +0100
      Re: Why use an email client AND sendmail/popa3d Greg Wooledge <wooledg@eeg.ccf.org> - 2020-11-25 14:10 +0100
      Re: Why use an email client AND sendmail/popa3d David Wright <deblis@lionunicorn.co.uk> - 2020-11-25 16:30 +0100
  Re: Why use an email client AND sendmail/popa3d - Does this avoid  the hijack? Andrei POPESCU <andreimpopescu@gmail.com> - 2020-11-23 13:20 +0100
    Re: Why use an email client AND sendmail/popa3d Keith Bainbridge <ke1thozgroups@gmx.com> - 2020-11-24 23:40 +0100
      Re: Why use an email client AND sendmail/popa3d Joe <joe@jretrading.com> - 2020-11-25 10:10 +0100
        Re: Why use an email client AND sendmail/popa3d Celejar <celejar@gmail.com> - 2020-11-25 15:20 +0100
          Re: Why use an email client AND sendmail/popa3d Joe <joe@jretrading.com> - 2020-11-25 21:20 +0100
            Re: Why use an email client AND sendmail/popa3d Celejar <celejar@gmail.com> - 2020-11-25 21:50 +0100
    Re: Why use an email client AND sendmail/popa3d - Does this avoid  the hijack? Joe <joe@jretrading.com> - 2020-11-25 10:20 +0100
    Re: Why use an email client AND sendmail/popa3d - Does this avoid  the hijack? David Wright <deblis@lionunicorn.co.uk> - 2020-11-26 05:00 +0100
      Re: Why use an email client AND sendmail/popa3d - Does this avoid the  hijack? mick crane <mick.crane@gmail.com> - 2020-11-26 10:00 +0100
        Re: Why use an email client AND sendmail/popa3d - Does this avoid  the hijack? David Wright <deblis@lionunicorn.co.uk> - 2020-11-29 04:30 +0100
      Re: Why use an email client AND sendmail/popa3d - Does this avoid  the hijack? Joe <joe@jretrading.com> - 2020-11-26 10:40 +0100
        Re: Why use an email client AND sendmail/popa3d - Does this avoid  the hijack? David Wright <deblis@lionunicorn.co.uk> - 2020-11-29 04:30 +0100

csiph-web