Re: More on Testing SRS

Mark <[email protected]> Fri, 02 Jul 2004 11:11:49 GMT
Newsgroups gmane.mail.spam.srs.general
Organization Asarian-host
Message-ID <[email protected]>
> On Sun, 2004-06-13 at 12:17 -0500, Seth Goodman wrote:
>
> > SourceForge did the right thing.  The sending system said the MAIL
> > FROM: address was no good, so SourceForge the mail.
> >
> > Look like you need to configure your MX to respond to CBV's, and it
> > must have the capability of validating SRS-signed addresses.
>
> i DO have the SRS stuff in sendmail, so i am not sure why thats
> not working. I have sendmail currently configured as in the
> description found at:
>
> http://asarian-host.net/srs/sendmailsrs.htm
>
> and the checks performed there work correctly.
>
> As for CBV responses, what is your suggestion for a sendmail MTA?

As Seth has already pointed out, your MX needs to be able to validate SRS
signed addresses. You can easily test this by generating a valid SRS address
(your outgoing mailserver already does that correctly), and telnet to your
MX, on port 25, to validate the SRS signed RCPT TO address.

You will need to tell a bit more about your setup. Does your MX use a Milter
at the gate? Or do you have sendmail validate the SRS recipients directly,
using the srs2envtol.pl script? A Milter will, of course, give you a bit
more colorful error codes, but requires some extra steps.

Cheers,

- Mark

        System Administrator Asarian-host.org

---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx