IETF Logo Mail Archive

Re: STARTTLS & EHLO

Paul Smith <paul@pscs.co.uk> Tue, 27 January 2009 09:30 UTC

Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n0R9UYg1062341 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 27 Jan 2009 02:30:34 -0700 (MST) (envelope-from owner-ietf-smtp@mail.imc.org)
Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id n0R9UYm7062340; Tue, 27 Jan 2009 02:30:34 -0700 (MST) (envelope-from owner-ietf-smtp@mail.imc.org)
X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-smtp@mail.imc.org using -f
Received: from mail.pscs.co.uk (mail.pscs.co.uk [77.240.14.73]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n0R9UMG2062328 for <ietf-smtp@imc.org>; Tue, 27 Jan 2009 02:30:33 -0700 (MST) (envelope-from paul@pscs.co.uk)
Received: from lmail.pscs.co.uk ([62.3.195.6]) by mail.pscs.co.uk ([77.240.14.73] running VPOP3) with ESMTP; Tue, 27 Jan 2009 09:30:20 -0000
Received: from [192.168.66.101] ([192.168.66.101]) by lmail.pscs.co.uk ([192.168.66.70] running VPOP3) with ESMTP; Tue, 27 Jan 2009 09:30:09 -0000
Message-ID: <497ED420.30708@pscs.co.uk>
Date: Tue, 27 Jan 2009 09:30:08 +0000
From: Paul Smith <paul@pscs.co.uk>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: Tony Hansen <tony@att.com>
CC: ietf-smtp@imc.org
Subject: Re: STARTTLS & EHLO
References: <497DE492.4080506@pscs.co.uk> <497DED29.70402@att.com>
In-Reply-To: <497DED29.70402@att.com>
X-Enigmail-Version: 0.95.7
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Authenticated-Sender: paul
X-Server: VPOP3 Enterprise V2.6.0e - Registered
X-Organisation: Paul Smith Computer Services
Sender: owner-ietf-smtp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-smtp/mail-archive/>
List-ID: <ietf-smtp.imc.org>
List-Unsubscribe: <mailto:ietf-smtp-request@imc.org?body=unsubscribe>

Tony Hansen wrote:
> By extension, if you expect to use any further SMTP extensions after
> negotiating TLS, I think you MUST resend an EHLO.
>   
Yes, I agree.
> However, if you're *not* using any further extensions after STARTTLS was
> sent, I don't see a requirement. So consequently, since you say you're
> not using any other extensions, I don't see the case for them refusing
> the message at that point without the EHLO.
>   
Just for clarity the session goes like:

S: 220-main.remotedns.co.uk ESMTP Exim 4.63 #1 Mon, 26 Jan 2009 18:25:48
+0000
S: 220-We do not authorize the use of this system to transport unsolicited,
S: 220 and/or bulk e-mail.
C: EHLO vpop3.company.co.uk
S: 250-main.remotedns.co.uk Hello vpop3.company.co.uk [IP address]
S: 250-SIZE 52428800
S: 250-PIPELINING
S: 250-AUTH PLAIN LOGIN
S: 250-STARTTLS
S: 250 HELP
C: STARTTLS
S: 220 TLS go ahead
<TLS negotiation>
C: MAIL FROM:<user@company.co.uk>
S: 550 HELO required before MAIL

(It happens with a few domains, all of which seem to be using Exim (4.63
or 4.69))

It certainly looks as if it has forgotten the fact of the EHLO command
once the STARTTLS has happened.

v2.23.0 | Report a Bug | By Email