Re: A Quickhack

Hadmut Danisch <[email protected]> wrote:
> >   We don't want our proposals to violate RFC 2821.
> 
> Well, isn't it the protocol defined by RFC2821, which allows
> spam and fraud? Isn't that exactly what we want to stop?

  Yes, but we have to recognize that RFC 2821 isn't completely wrong.
In this case, there are valid reasons for not checking the hostname.
It the minimum, we need to be sure that we address those reasons if we
have recommendations which contradict RFC 2821.

> If there is _no_ correlation between IP address and host name, what's
> the point in verifying it?

  That's not quite what I said.  There may be no direct correspondence
between hostname in EHLO, and source IP.  Even RMX doesn't check any
direct correspondence.

  Instead, RMX checks if the domain in EHLO *permits* outgoing SMTP
from an IP.  This is a completely different question than "does this
hostname equal this IP."

  Alan DeKok.