On Thu, 2002-07-04 at 16:22, Dean Brooks wrote:
> One of our users forwarded a message that they received from Spamcop
> today saying that the Received: headers coming out of our Exim
> installation weren't in compliance with RFC2821.
> Stamp = From-domain By-domain Opt-info ";" FWS date-time
> From-domain = "FROM" FWS Extended-Domain CFWS
> Extended-Domain = Domain /
> ( Domain FWS "(" TCP-info ")" ) /
> ( Address-literal FWS "(" TCP-info ")" )
> TCP-info = Address-literal / ( Domain FWS Address-literal )
> ; Information derived by server from TCP connection
> ; not client EHLO.
They missed the first line of the BNF... which is pretty silly. That is
taken from RFC2821. However it looks to me as though the RFC is *very*
badly written here, especially when taken with 822/2822 - ie mandating
the content of comments. Further up the comments don't sit well with
the BNF descriptions.
> So, the line is *supposed* to look something like this:
>
> > Received: from your-w92p4bhlzg ([12.246.204.28])
> > by iglou.com with smtp (Exim 4.05) id 17PrkX-0003Wo-00;
> > Wed, 03 Jul 2002 17:33:21 -0400
On Thu, 2002-07-04 at 16:34, Jochen Erwied wrote:
> The Received-Header looks quite ok. What may be wrong is the marked
> line - this is not a FQDN, but an unqualified host, which, according
> to RFC 2821 MUST NOT appear in a SMTP-header.
and here we trip over ourselves :-
This line MUST be structured as follows:
- The FROM field, which MUST be supplied in an SMTP environment,
SHOULD contain both (1) the name of the source host as presented
in the EHLO command and (2) an address literal containing the IP
address of the source, determined from the TCP connection.
so that part has to be what the remote end gave you in the HELO/EHLO,
and technically you are not allowed to reject based on what you are
given there.
The received line on your original mail (added by exim.org - the first
received line appears to be a sendmail version number and an exim queue
id so it looks like you have been playing) was (rewrapped):-
Received: from team.iglou.com ([192.107.41.45] helo=iglou.com
ident=sendmail) by exim-colo-01.whoc.theplanet.co.uk
with esmtp (Exim 3.33 #4) id 17Q8RG-00034E-00
for exim-users@???; Thu, 04 Jul 2002 16:22:34 +0100
So the stuff we put in comments is more extensive - and the first part
of the domain is not what we got from EHLO.
I'd say spamcop are being overly anal here....
Nigel.
--
[ Nigel Metheringham Nigel.Metheringham@??? ]
[ - Comments in this message are my own and not ITO opinion/policy - ]
