testmail

David Wolfskill david at catwhisker.org
Sun Apr 10 20:00:51 UTC 2016


On Sun, Apr 10, 2016 at 09:32:37PM +0200, Dominic Fandrey wrote:
> 123 test
> ....

OK; here we have the "Requirements for sending mail through mx1":

  The SMTP server in this case, mx1.freebsd.org, is set up so that it
  requires:
  
  * the IP address of the SMTP client must "reverse-resolve" to a
    hostname and
  
  * the hostname thus obtained must resolve to a set of IP addresses,
    one of which must match the IP address of the client and
  
  * the (fully-qualified) hostname given in the SMTP conversation
    (either HELO or EHLO) must resolve a set of IP addresses, one of
    which must match the IP address of the client.


And here's the Received header for the handoff to mx1:

Received: from mail.server1.bsdforen.de (bsdforen.de [82.193.243.81])
        by mx1.freebsd.org (Postfix) with ESMTP id 48AFB1283
        for <postmaster at freebsd.org>; Sun, 10 Apr 2016 19:33:57 +0000 (UTC)
        (envelope-from kami at freebsd.org)

The SMTP client using IPv4 address 82.193.243.81 identified itself as
"mail.server1.bsdforen.de", but:

root at mx1:/var/log # host mail.server1.bsdforen.de
Host mail.server1.bsdforen.de not found: 3(NXDOMAIN)
root at mx1:/var/log # 

So that contravenes the 3rd point (re: HELO or EHLO).

The rest looks OK:

root at mx1:/var/log # host bsdforen.de
bsdforen.de has address 82.193.243.81
bsdforen.de has IPv6 address 2a01:a380:4408:a003::2
bsdforen.de mail is handled by 20 bsdforen.de.
root at mx1:/var/log # host 82.193.243.81
81.243.193.82.in-addr.arpa domain name pointer bsdforen.de.
root at mx1:/var/log # 

So if an A record could be created for mail.server1.bsdforen.de
(with the value "82.193.243.81", that should make things work
properly.

Or if the SMTP client could be persuaded to identify itself merely
as "bsdforen.de", that would also work.

Finally, if neither of these is feasible within a reasonable time
period, we (postmaster@) could "whitelist" mail.server1.bsdforen.de
-- but the DNS stuff really ought to be addressed at some point.

Peace,
david   (current hat: part of postmaster at freebsd.org)
-- 
David H. Wolfskill				david at catwhisker.org
Those who would murder in the name of God or prophet are blasphemous cowards.

See http://www.catwhisker.org/~david/publickey.gpg for my public key.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 603 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-test/attachments/20160410/a2a5446c/attachment.sig>


More information about the freebsd-test mailing list