It's so nice to feel loved. Thank you for the warm fuzzy.
I don't think its necessary to include the option to include the
credentials in the email header, as people who need the credentials can get
them from the HTML code of our webpages. That way if I forget the
password, it's easy to find - and I use that same 4 digit password
everywhere for safety.
But seriously, why couldn't you just answer by saying that this is by
design such that internal hostnames are not revealed? I would have replied
with a "that makes sense, thanks for the clarification, and we move on."
It would have taken you 2 seconds. instead I was left hanging. Ignoring
a question that you don't think makes sense doesn't solve anything or help
anyone. It's not like there's that much traffic here that its
unmanageable.
It wasn't necessary to insult me either. There's nothing in the GUI that I
could find that indicates that the relay port will not be doing any reverse
lookup. It wasn't unreasonable for me to be asking. Exchange servers
regularly expose the AD name and machine names. If security through
obscurity is your intention here, then how about removing the ASSP version
and build number from the email headers so that potential hackers don't
know the exact code running their target? Hackers love that.
And with ASSP being in perpetual beta (which is a great thing) you're
discouraging users from asking questions or reporting potential bugs by
being so aggressive. We're all in this together, yes, you are our leader,
yes sometimes people ask silly questions. But also sometimes there's
nothing documented about something that seems off and we should be
encouraged to ask. That's what I did here.
I'm not trying to be a jerk here, I just don't understand why my question
warranted such a response. I am sincerely, really I am, sorry that you
find our questions to be so offensive or stupid. You're appreciated, most
of us aren't the coding wiz that you are, we absolutely rely on you - your
massive contribution to ASSP code - your maintenance of everything. But we
also we like to discuss things with civility in the spirit of this
community. Please try not to take us neophytes as some kind of enemy.
On Fri, Mar 18, 2016 at 2:11 PM, Scott MacLean <a...@hollsco.com> wrote:
> Thomas, you're hilarious! :) Have a good weekend.
>
> On 3/18/2016 2:06 PM, Thomas Eckardt wrote:
> >> ?
> >
> >
> >> On Wed, Mar 16, 2016 at 12:21 PM, K Post <nntp.p...@gmail.com> wrote:
> >
> > This useless post was ignored by me - but now I can't any longer -
> > I'sorry.
> >
> > reverse DNS for privat hosts/domains in public headers ?*1000
> >
> > So I suggest a new feature:
> >
> > - instead using 'unknown' as host name in Received headers of outgoing
> > mails, assp will provide the full privat hostname, which shows for
> example
> > the AD domain name
> > - in addition assp adds the domain Adminstrator credentials in clear text
> > at the end of this header line
> > - the feature 'HideIPandHelo' should be removed - it makes hackers so
> > unhappy, because they are not getting any usefull information
> >
> > You'll not need this really nice new feature and you can safely switch it
> > off, if you provide the real IP and the correct hostname (in the HELO)
> > like : (172.15.15.5 helo=exchange.domain.local)
> >
> > Thomas
> >
> >
> >
> >
> > Von: K Post <nntp.p...@gmail.com>
> > An: ASSP development mailing list <assp-test@lists.sourceforge.net>
> > Datum: 18.03.2016 18:05
> > Betreff: Re: [Assp-test] ASSP as smarthost - reverse DNS
> >
> >
> >
> > ?
> >
> >
> > On Wed, Mar 16, 2016 at 12:21 PM, K Post <nntp.p...@gmail.com> wrote:
> >
> >> I don't think this is an ASSP problem, but wanted to make sure as I'm at
> >> the end of my rope on this.
> >>
> >> Regular inbound messages are fine. As long as the helo matches reverse
> >> DNS, then the received line is like
> >>
> >> Received: from whatever.outside.com (1.2.3.4 helo=whatever.outside.com
> >> ).....
> >>
> >> If the helo doen't match, it gives
> >>
> >> Received: from unknown (1.2.3.4 helo=whatever.outside.com).....
> >> (or maybe that's only if there is no reverse dns for the ip?)
> >>
> >> Fine
> >>
> >> What I'm finding though is that when i send mail from our exchange
> >> servers, which use ASSP as a smarthost, it always shows
> >> Received: from unknown (172.15.15.5
> > helo=exchange.int.ourcharity.org)....
> >> despite 172.15.15.5 reversing internally to exchange.int.ourcharity.org
> >>
> >> Is there any chance that there's a bug in ASSP where it's not trying to
> >> reverse the IP for relays?? Not trying to be accusatory, I just can't
> >> figure it out. If I do a nslookup on the assp machine, all is fine for
> >> that ip.
> >>
> >>
> >>
> >>
> >
> ------------------------------------------------------------------------------
> > Transform Data into Opportunity.
> > Accelerate data analysis in your applications with
> > Intel Data Analytics Acceleration Library.
> > Click to learn more.
> > http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
> > _______________________________________________
> > Assp-test mailing list
> > Assp-test@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/assp-test
> >
> >
> >
> >
> > DISCLAIMER:
> > *******************************************************
> > This email and any files transmitted with it may be confidential, legally
> > privileged and protected in law and are intended solely for the use of
> the
> >
> > individual to whom it is addressed.
> > This email was multiple times scanned for viruses. There should be no
> > known virus in this email!
> > *******************************************************
> >
> >
> >
> >
> >
> ------------------------------------------------------------------------------
> > Transform Data into Opportunity.
> > Accelerate data analysis in your applications with
> > Intel Data Analytics Acceleration Library.
> > Click to learn more.
> > http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
> >
> >
> >
> > _______________________________________________
> > Assp-test mailing list
> > Assp-test@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/assp-test
> >
>
>
>
> ------------------------------------------------------------------------------
> Transform Data into Opportunity.
> Accelerate data analysis in your applications with
> Intel Data Analytics Acceleration Library.
> Click to learn more.
> http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
