[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Technical mail setup question

On Fri, Jun 04, 1999 at 10:59:26AM +1000, Craig Sanders wrote:
> they can use their ISP's mail relay or beg/buy a uucp-over-tcp service,
> or run a ssh tunnel to a friendly mail host somewhere, or one of many
> other cheap or free options. internet technology is extremely flexible
> if you know how to use it.

Thanks for the offer. If I knew this before I got my sendmail to be accepted
by the relay I had probably accepted it because it was really frustrating...

The only solution to this problem seems to be the following: Just use a mail
reader like Netscape and fire up your connection any time you want to send a
mail. Fine. Every connection costs me at least 12Pf or 8cents. So I had to pay
about a dollar a day just for sending a few mails.

> there's a right way and a wrong way to do HELO/EHLO checks.
> checking that the HELO/EHLO line is a valid hostname/domain name is
> reasonable (but not really necessary). checking that it exactly matches
> the .in-addr.arpa domain name is unreasonable because it limits what
> their users can do *without* serving any useful purpose.

Great. So a spammer could connect to every ISPs relay just telling him a wrong
hostname and send its spam. Voila - it is correctly relayed now. 

> some ISPs even allow relaying for their customers with some sort of
> POP-before-SMTP "authentication"...the user makes a POP connection with
> username and password, and the server adds the user's IP address to the
> list of relay-allowed IP addresses for the next 5 or 10 or 30 minutes.
> it's easy enough to hack in support for this to most POP daemons.

This is what my ISP uses. Just another reason not to use the relay because the
POP server fails every so often and I am unable to send mail anymore...


Reply to: