Re: Message via your Google Profile: Ppymilter protocol sequence

[Eric DeFriez]

Hi Stephen-

There's actually a ppymilter mailing group (bottom left on the page under "links"  though looking at it now i think it's only real members are the owners/maintainers of ppymiler and the only content is from spammers.  I've reconfigured the group so that not anyone can join (have to request an invitation by answering a trivial question which should hopefully deter them).

Anyway, sorry for slow to respond, out of town for a few days.  Yeah I think what data is sent from each command/state really depends a lot on your MTA, whether sendmail or postfix, what version and if sendmail what your cf looks like.  But it's quite likely you are correct about the hostname and address provided, if it looks good it should stay good until something in your setup changes and if that's the case it seems like a reasonable way to do SPF checking in conjunction with the from/sender info.  (I don't think we/sendmail provide the connecting IP in any other context, right?)  Sorry, it's been a long long time since i've used/messed with any of this code.  We've moved completely off of sendmail and on to Google Apps for your Domain now!  :)

BTW, we're happy to have any help with wiki/support so if you're a current user and want to be added as a contributor to the project so you can comment on the wiki, etc let me know!

Eric

On Fri, May 4, 2012 at 6:16 AM, Stephen Nightingale <j.s.nig...@gmail.com> wrote:

Eric, (Sorry, this is the only contact method I can find for you. The Wiki is unattended). Some issues about the milter protocol: While SMTP includes the FQDN on the HELO/EHLO message, the milter implementation of Sendmail sends the 'H' command with no arguments (unless there's a TLS connection). However the 'C' for connect command includes a $j, with the user@confHOST (as defined in sendmail.cf) and a $ with hostname and address. The 'M' for mail milter command includes user@hostname as per the SMTP MAIL protocol message. I am taking it that the identity provided on the 'C' milter command stands in for the HELO identity, and extending ppymilter to that effect. Please let me know if this is a bad way to do SPF checking. Cheers, Stephen Nightingale (night at nist dot gov)




-------------------------------------------------------------

This message was sent to you from your Google profile. The sender does not have your email address.

If you no longer wish to receive messages from your Google profile, you may edit your settings.