Rob, Patrick,

> > RFC 2006 <http://tools.ietf.org/rfc/rfc2606.txt> indicates you are right.
> > I need to do some testing. Maybe I jumped to the wrong conclusion why
> > specifying "localhost" only causes problems.
> 
> reject_non_fqdn_helo_hostname will catch a bare 'localhost' since it has
> no '.', but 'localhost.' doesn't work either, since the implementation
> specifically checks for '.' within the string.  So it'll cause problems
> here either way, but...
>   [...]
> I'd say that's a mistake, and not one amavisd-new should be trying
> particularly hard to avoid.  On my systems, I reject any HELO coming from
> the outside that looks like localhost, the box's own addresses or domain
> names, the RFC 2606 reserved names, and a handful of common pseudo-TLDs,
> including '.localdomain'.  But it's perfectly fine to use 'localhost' over
> the loopback:

Well, so far the 'localhost' seems to have caused least surprises.
Initially the default was to use $myhostname, but that caused Postfix
to complain about mail looping. I agree that 'localhost.' may indeed
be a little bit better choice - but in the absence of 'search' or
'domain' in /etc/resolv.conf (at the MTA host) they are both the same.
Not sure if it is worth changing the defult, considering that the
reject_non_fqdn_helo_hostname will reject either.

  Mark

------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev 
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 Please visit http://www.ijs.si/software/amavisd/ regularly
 For administrativa requests please send email to rainer at openantivirus dot 
org

Reply via email to