From: Craig Sanders (no email)
Date: Wed Jun 02 2004 - 22:50:07 EDT
On Wed, Jun 02, 2004 at 07:35:36AM +0200, Cami wrote:
> >>A spammer sends mail with just a bare "From: spammer" as the RFC822 sender
> >>address. Postfix appends $myorigin to it. Users get mail from a
> >>supposedly local user. Difficult to explain to them *that* postfix adds
> >>its own name, not possible to respond to the general response of "But...
> >>thats stupid. Why does it do that?"
> >
> >the answer is that lots of local users are stupid and configure their mail
> >clients to send mail from just plain "john" rather than "".
>
> You are making huge presumptions..
no, i made an observation based on over 12 years of experience working with
MTAs in the ISP industry (and another 10+ years before that working with
systems, networks and mail systems in other industries). if there's one
universal truth about the ISP industry it is that lusers are stupid and
ignorant (or, at best, indistinguishable from stupid and ignorant)
(oh, and i think you mean assumption rather than presumption)
> >in this particular instance, postfix IS the originating SMTP server, acting
> >on behalf of the client and what it does is a Good Thing. it drastically
> >reduces the number of stupid questions from stupid users with misconfigured
> >mail clients. the one or two stupid questions per year from people puzzled
> >by the behaviour are a tiny price to pay.
>
> Clearly you do not work for any large ISP..
clearly you are the one guilty of making huge assumptions.
> >another possibility is to only make these changes IF there aren't any
> >Received: headers (apart from the one added by the local postfix). it won't
> >help with direct-to-mx spam/viruses(*), but otherwise it is a pretty good
> >indicator of whether the local postfix is the first smtp server that has
> >seen the message or not.
>
> *Why*? This is exactly what you do not want..
why not?
adding Message-Id and $mydomain to non-fqdn addresses in mail sent by your own
customers is not a bad thing (in fact, it is arguably a Good Thing - i'm
personally ambivalent about it). adding them to mail from non-customers is
undeniably a Bad Thing. avoiding a Bad Thing while still doing a questionably
Good Thing is *exactly* what you want.
craig
-- craig sanders <> The next time you vote, remember that "Regime change begins at home"
|
|
|