[pmmail-list] HELO - Not...Re: Another new beta 2627 posted

[Rich]

I thought it was time to check out another new release to see if my concerns have been 
addressed. I was encouraged by the help file that states:

32. SERVER: PMMail 2000 is now RFC-821 compliant when sending the HELO command 
during a message send.

I have complained about this command for a long time, and been completely ignored... But 
that's okay...

It used to send my PC's name, then the PC name along with my personal network name. Great 
for security! Now it's back to just sending the PC name, on my XP test machine anyway.

This is not only wrong, but to my reading and interpretation, _not_ RFC-821 compliant.
As stated:

      The following two commands are used in transmission channel
      opening and closing:

         HELO <SP> <domain> <CRLF>

         QUIT <CRLF>

      In the HELO command the host sending the command identifies
      itself; the command may be interpreted as saying "Hello, I am
      <domain>".

Key word being "<domain>"! My personal computer name has nothing to do with my domain. 
The internet has no knowledge of my personal computer name (or shouldn't anyway!). My 
'domain' is my e-mail return address of 'bearlycomputing.com'. This is the only domain the 
internet has any knowledge of as to me and the only one that would make any sense at all.

I am concerned about this not only for security reasons, but because I have more than one 
domain and do not want them obviously linked together by my mailer!

After testing 2627, I retested Mozilla 1.1b. It handles the domain name and helo command 
correctly. Not surprising since it's an open source project. It simply gets the domain name from 
my e-mail address, and this is proper. There could be no arquement about spamming issues and 
using a bogus e-mail address because it would be just as simple to enter a bogus computer 
name & reboot before trying that with pmmail. Who sends spam with an e-mail client anyway? 
But that's besides the point...

Not many ISPs seem to send the helo results with their e-mails, but mine does and I'd still like to 
see this fixed...

Rich...


Below are the headers from both PMMail 2627 and Mozilla 1.1b for comparison. They go 
through the same SMTP server...


PMMail 2627:

>X-POP3-Rcpt: rich@bearlycomputing.com
>Received: from relay02.roc.frontiernet.net (relay02.roc.frontiernet.net [66.133.131.35])
>	by host2.the-web-host.com (8.10.2/8.10.2) with ESMTP id g84ITVR24339
>	for <rich@bearlycomputing.com>; Wed, 4 Sep 2002 14:29:31 -0400
>Message-Id: <200209041829.g84ITVR24339@host2.the-web-host.com>
>Received: (qmail 16083 invoked from network); 4 Sep 2002 18:29:29 -0000
>Received: from unknown (HELO RDT1) ([209.130.218.183])
>          (envelope-sender <rich@bearlycomputing.com>)
>          by relay02.roc.frontiernet.net (qmail-ldap-1.03) with SMTP
>          for <rich@bearlycomputing.com>; 4 Sep 2002 18:29:29 -0000
>From: "rich@bearlycomputing.com" <rich@bearlycomputing.com>
>To: "rich@bearlycomputing.com" <rich@bearlycomputing.com>
>Date: Wed, 04 Sep 2002 14:30:52 -0400
>Reply-To: "rich@bearlycomputing.com" <rich@bearlycomputing.com>
>Priority: Normal
>X-Mailer: PMMail 2000 Professional (2.20.2627) For Windows 2000 (5.1.2600)
>MIME-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>Content-Transfer-Encoding: 7bit
>Subject: test 2267


Mozilla 1.1b:

>X-POP3-Rcpt: rich@bearlycomputing.com
>Received: from relay02.roc.frontiernet.net (relay02.roc.frontiernet.net [66.133.131.35])
>	by host15.the-web-host.com (8.10.2/8.10.2) with ESMTP id g84IvfA07746
>	for <rich@bearlycomputing.com>; Wed, 4 Sep 2002 14:57:47 -0400
>Received: (qmail 26488 invoked from network); 4 Sep 2002 18:57:30 -0000
>Received: from unknown (HELO bearlycomputing.com) ([209.130.218.183])
>          (envelope-sender <rich@bearlycomputing.com>)
>          by relay02.roc.frontiernet.net (qmail-ldap-1.03) with SMTP
>          for <rich@bearlycomputing.com>; 4 Sep 2002 18:57:30 -0000
>Message-ID: <3D765728.7000909@bearlycomputing.com>
>Date: Wed, 04 Sep 2002 14:55:36 -0400
>From: Rich <rich@bearlycomputing.com>
>Organization: Bearly Computing
>User-Agent: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.1b) Gecko/20020721
>X-Accept-Language: en-US,en
>MIME-Version: 1.0
>To: rich@bearlycomputing.com
>Subject: test mozilla 1.1b
>Content-Type: text/plain; charset=us-ascii; format=flowed
>Content-Transfer-Encoding: 7bit








On Wed, 04 Sep 2002 13:53:18 -0400, PMMail 2000 Support wrote:

>On Wed, 04 Sep 2002 13:43:18 -0400, Ralph Cohen wrote:
>
>>Another new beta 2627 has been posted at
>>ftp.blueprintsoftwareworks.com/pub/pmmail/betas
>
>Brandon King, PMMail 2000 Technical Support
>support@blueprintsoftwareworks.com
>http://www.pmmail2000.com
>
>


******************************************************************************
Practice Random Acts of Kindness and Senseless...Umm...Uhh....
  Oh - Heck...I never could remember all that "nice" stuff.
-----------------------------{rich@bearlycomputing.com}------------------------------
******************************************************************************

- pmmail-list - The PMMail Discussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com

To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com 
with the first line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------