Full Disclosure mailing list archives

Re: Apparently the practice was prevalent


From: Martin Mačok <martin.macok () underground cz>
Date: Wed, 11 Feb 2004 00:52:38 +0100

On Tue, Feb 10, 2004 at 08:20:00PM -0000, John.Airey () rnib org uk wrote:

format of the email you are reading, RFC 822. It's worth pointing
out that anyone who does not have an "open" email relay is in
breach of this RFC

Not true.

At the risk of descending into a playground argument, 'tis true.
Sections 4.3.2, 6.2.2 and 6.2.6 imply that you have an open relay.

Which RFC ???

In fact, RFC 2822 which obsoletes RFC 822 doesn't even mention
relays.

Of course. It also doesn't mention space ships. It's just about
something else. It has not anything to do with "email relaying".

The right one is RFC 2821. See the quote of "Relaying" part from my
previous post.

Is there any RFC that specifies that open relays are a bad idea?

Do not expect that there is an RFC for every bad idea around ...

I can't find one.

I can.

RFC 2505         Anti-Spam Recommendations       February 1999

2.1. Restricting unauthorized Mail Relay usage

[..]

   Therefore, the MTA MUST be able to control/refuse such Relay usage.

[..]

            ... MTA MUST be able to authorize Mail Relay usage based on
   a combination of:

   o   "RCPT To:" address (domain).
   o   SMTP_Caller FQDN hostname.
   o   SMTP_Caller IP address.

[..]

Martin Mačok

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: