Post Reply  Post Thread 
Subscribing to this forum didn't work with default ispcp configuration
Author Message
rbtux
Member
***


Posts: 1,164
Group: Registered
Joined: Feb 2007
Status: Away
Reputation: 21
Post: #11
RE: Subscribing to this forum didn't work with default ispcp configuration

Well take the appropriate RFC: 2821.

"These commands are used to identify the SMTP client to the SMTP
server. The argument field contains the fully-qualified domain name
of the SMTP client if one is available. In situations in which the
SMTP client system does not have a meaningful domain name (e.g., when
its address is dynamically allocated and no reverse mapping record is
available), the client SHOULD send an address literal (see section
4.1.3), optionally followed by information that will help to identify
the client system."

Well I think this is enough specific. But you always have to create a email policy for your or your customer needs. So I think the discussion is senseless because mail server configuration is a very individual thing...


OS: Debian Lenny
ispCP Version: Trunk r1033
Activated: AWStats dynamic, Dovecot, Avelsieve, Selective Greylisting, Bogus MX Filter,
No Webtools, Roundcube, Some own modifications
04-15-2008 07:45 PM
Visit this user's website Find all posts by this user Quote this message in a reply
zpin
Junior Member
*


Posts: 60
Group: Registered
Joined: Sep 2007
Status: Offline
Reputation: 0
Post: #12
RE: Subscribing to this forum didn't work with default ispcp configuration

True, I took the old one... But here there you also have the exception. There are situations in which it is legal to not send a fqdn... I know of some mailservers (that I leave unnamed ^^) that don't send a fqdn because they belong to a lan and don't have a reverse domain entry. Seems to be standard practice for small office setups. Or maybe it's just a large regional company that gets it wrong...

It is true that you should always do that, but the reality looks a bit different. The question is what the ispcp team thinks would be the best default config for the admin that doesn't check everything as he should. And be it just to prevent them from spaming the forums/ticket system Wink

04-15-2008 08:20 PM
Find all posts by this user Quote this message in a reply
rbtux
Member
***


Posts: 1,164
Group: Registered
Joined: Feb 2007
Status: Away
Reputation: 21
Post: #13
RE: Subscribing to this forum didn't work with default ispcp configuration

my opinion about this is. When someone is not able to configure his mail server according to this best practise he should relay through his isps server.

But your are right, thats not a absolute requierement. I've made the experience in Switzerland that most of the administrators are very cooperative. Most of them simply don't know about this whole dns / helo stuff. We offer help to correct the config or to configure the mailserver for using a relay server.

But I think the default config is OK....


OS: Debian Lenny
ispCP Version: Trunk r1033
Activated: AWStats dynamic, Dovecot, Avelsieve, Selective Greylisting, Bogus MX Filter,
No Webtools, Roundcube, Some own modifications
04-15-2008 08:59 PM
Visit this user's website Find all posts by this user Quote this message in a reply
Zothos
Member
****
Dev Team

Posts: 484
Group: Dev Team
Joined: Feb 2007
Status: Offline
Reputation: 5
Post: #14
RE: Subscribing to this forum didn't work with default ispcp configuration

I agree totaly with rbtux.
If someone dont want this, he could change this easily.


Real programmers don't comment their code - it was hard to write, it should be hard to understand

OS : Gentoo 32bit Stage1
ispCP Version : RC4
Mods : Dovecot | Pure-ftpd

04-15-2008 10:42 PM
Find all posts by this user Quote this message in a reply
joximu
Moderator
*****


Posts: 3,534
Group: Moderators
Joined: Jan 2007
Status: Offline
Reputation: 47
Post: #15
RE: Subscribing to this forum didn't work with default ispcp configuration

rbtux Wrote:
... Most of them simply don't know about this whole dns / helo stuff....


the sad story...


2008-03-16 ispCP RC4 released!!!
04-16-2008 12:18 AM
Visit this user's website Find all posts by this user Quote this message in a reply
simple



Posts: 3
Group: Registered
Joined: Dec 2006
Status: Offline
Reputation: 0
Post: #16
RE: Subscribing to this forum didn't work with default ispcp configuration

I'm a big fan of "stick with the standards"-behaviour in most cases. In the discussion here, where the standard install template of postfix is included, I would prefer a more fault tolerant solution. Most big providers in Germany (e.g. Freenet and T-Online) don't use a standards-conform HELO. So would you rather have every single admin change the two lines after installation, or wouldn't it be better to do something like that in the install template:

Code:
/etc/postfix/main.cf
[..]
smtpd_helo_restrictions      = permit_mynetworks,
                               permit_sasl_authenticated,
# would be more standards-compliant, but some big ISPs don't deliver FQDN HELOs
#                              reject_invalid_helo_hostname,
#                              reject_non_fqdn_helo_hostname
[..]


Active Systems: VHCS 4.7.1 (2), VHCS 4.8.1 (3), IspCP OMEGA 1.0 RC4 (3)
05-09-2008 11:28 PM
Visit this user's website Find all posts by this user Quote this message in a reply
Tseng
Junior Member
*


Posts: 15
Group: Registered
Joined: Apr 2008
Status: Offline
Reputation: 0
Post: #17
RE: Subscribing to this forum didn't work with default ispcp configuration

simple Wrote:
I'm a big fan of "stick with the standards"-behaviour in most cases. In the discussion here, where the standard install template of postfix is included, I would prefer a more fault tolerant solution. Most big providers in Germany (e.g. Freenet and T-Online) don't use a standards-conform HELO. So would you rather have every single admin change the two lines after installation, or wouldn't it be better to do something like that in the install template:

Code:
/etc/postfix/main.cf
[..]
smtpd_helo_restrictions      = permit_mynetworks,
                               permit_sasl_authenticated,
# would be more standards-compliant, but some big ISPs don't deliver FQDN HELOs
#                              reject_invalid_helo_hostname,
#                              reject_non_fqdn_helo_hostname
[..]


I agree to that. Like some of us noticed, it's a problem if very big isps dont stick to the standards. It wouldn't help anyone if big isps like t-online, freenet or others can't send emails to a ipscp server just because ispcp (postfix) requires a valid HELO as default setting. And like rbtux wrote... most of the people actually don't know what a HELO is. A lot of them have problems installing ispCP, so why should we rely on people knowing how to change the settings? Imho a valid HELO shouldn't be required by defaullt.

Tseng

05-10-2008 12:03 AM
Find all posts by this user Quote this message in a reply
simple



Posts: 3
Group: Registered
Joined: Dec 2006
Status: Offline
Reputation: 0
Post: #18
RE: Subscribing to this forum didn't work with default ispcp configuration

You can see how important that setting is to me when you take a look at my profile: I'm registered since Dez 2006 - this was the first post I wrote Wink


Active Systems: VHCS 4.7.1 (2), VHCS 4.8.1 (3), IspCP OMEGA 1.0 RC4 (3)
05-10-2008 12:13 AM
Visit this user's website Find all posts by this user Quote this message in a reply
Cube
Documentation Team
***
Docu Team

Posts: 429
Group: Docu Team
Joined: Apr 2007
Status: Offline
Reputation: 5
Post: #19
RE: Subscribing to this forum didn't work with default ispcp configuration

Hm, I get sometimes mails from T-Online and I never had problems. Aren't they using something like "mailout04.sul.t-online.com"?

These restrictions are filtering a big amount of spam. If a providers sends a wrong HELO/EHLO the customers should complain that they can not send mails and finally they will fix it. For those without a FQDN there are address literals, which postfix also accepts with these restrictions.

05-10-2008 07:32 AM
Find all posts by this user Quote this message in a reply
rbtux
Member
***


Posts: 1,164
Group: Registered
Joined: Feb 2007
Status: Away
Reputation: 21
Post: #20
RE: Subscribing to this forum didn't work with default ispcp configuration

or whitelist system which cannot send you emails...


OS: Debian Lenny
ispCP Version: Trunk r1033
Activated: AWStats dynamic, Dovecot, Avelsieve, Selective Greylisting, Bogus MX Filter,
No Webtools, Roundcube, Some own modifications
05-10-2008 07:42 AM
Visit this user's website Find all posts by this user Quote this message in a reply
Post Reply  Post Thread 

View a Printable Version
Send this Thread to a Friend
Subscribe to this Thread | Add Thread to Favorites

Forum Jump:

| All rights reserved : isp-control.net |