OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: HELO and FQDN
From: Wietse Venema (wietseporcupine.org)
Date: Thu Nov 02 2000 - 17:46:35 CST

Your problem does not reproduce:

    % postconf smtpd_client_restrictions
    smtpd_client_restrictions = reject_non_fqdn_hostname, reject_invalid_hostname

Witness the HELO reply to an unqualified hostname:

    hades% telnet localhost smtp
    Trying 127.0.0.1...
    Connected to localhost.
    Escape character is '^]'.
    220 hades.porcupine.org ESMTP Postfix
    helo foo
    250 hades.porcupine.org
    quit
    221 Bye
    Connection closed by foreign host.

Please come back when you can reduce the whole problem to just one
change to the main.cf file.

        Wietse

Mark Tiramani:
> More on the non-FQDN HELO rejection:
>
> I had possibly misunderstood the generic restrictions and therefore used:
>
> smtpd_client_restrictions = reject_non_fqdn_hostname, reject_invalid_hostname ...
>
> Looking again I realise that reject_non_fqdn_hostname is not listed for smtpd_client_restrictions
>
> However, postfix rejects a non-FQDN in the HELO with a '504 ... Helo command rejected: need fully....'
> when reject_non_fqdn_hostname is used in smtpd_client_restrictions.
>
> Do other smtpd client restrictions also map to smtpd HELO restrictions?
>
> > Interesting, because the output lists no restriction that would
> > reject non-FQDN hostnames in HELO/EHLO commands.
> >
> > When I apply these restrictions:
> >
> > % telnet localhost smtp
> > Trying 127.0.0.1...
> > Connected to localhost.
> > Escape character is '^]'.
> > 220 hades.porcupine.org ESMTP Postfix
> > helo foo
> > 250 hades.porcupine.org
> > quit
> > 221 Bye
> > Connection closed by foreign host.
> >
> > There is no complaint about the HELO command. So, unless there is
> > a way to reproduce the problem I won't be able to fix it.
> >
> > Wietse
>
> Mark
>
> Mark Tiramani
> FREDO Internet Services
> markjtfredo.co.uk
>
>
>