RE: fix.your.open.relay.or.die.net

["Walden H. Leverich" <WaldenL@xxxxxxxxxxxxxxx>]

Tom,

You missed my point, I wasn't sending him to sendmail.org to read the RFC's
but rather because he said he'd been there to read how to configure as a
non-relaying server.

-Walden

------------
Walden H Leverich III
President
Tech Software
(516)627-3800 x11
WaldenL@TechSoftInc.com
http://www.TechSoftInc.com



-----Original Message-----
From: thomas@inorbit.com [mailto:thomas@inorbit.com]
Sent: Wednesday, November 21, 2001 6:51 PM
To: midrange-l@midrange.com
Subject: RE: fix.your.open.relay.or.die.net


Walden:

On Wed, 21 November 2001, "Walden H. Leverich" wrote:

> Are you sending from inside or outside your firewall? If you can do
> what you mentioned (steps 1-4) and you're able to send to anyone from
> outside your firewall please re-read sendmail.org, you are STILL an
> open relay.

C'mon, sendmail.org doesn't control the RFCs; they try to implement them
accurately. Besides, RFC821 specifies:

==The receiver-SMTP may accept or reject the task of relaying the mail in
the same way it accepts or rejects mail for a local user.==

And RFC1123, in the SMTP Requirements Summary table under "MAIL
FORWARDING:/Implement relay function: 821/section 3.6", does _not_ rate it
as 'MUST' nor even as 'SHOULD', but only as 'MAY'. Numerous discussion and
information paragraphs describe supporting reasons why it might not be
supported by an SMTP implementation at all; and nowhere does it mandate a
mechanism for any implementation for deciding when to relay, but only states
what 'SHOULD' be done if relaying is chosen against.

Tom Liotta

--
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
http://www.compuserve.com/trycsrv/cs2000/webmail/




_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.