Re: [ietf-smtp] EHLO domain validation requirement in RFC 5321

[Richard Clayton <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In message <[e-mail]>,
Keith Moore <[e-mail]> writes

>Thanks for providing a list, though I wonder if this is the same as the 
>list that John referred to.
>
>I do suspect that the list could use some updating.   For example:
>
>On 10/4/20 1:52 PM, Richard Clayton wrote:
>> For the next few years however:
>>
>> *  Use a static IPv4 address for your email system
>
>IMO this should change to support the reality that IPv4 addresses are 
>getting scarcer by the day, especially in some parts of the world.  

you may wish it to change (and I am sure it will in time) ... but a
consensus view (albeit from 2013, but I would expect it was much the
same in 2020) is that you will have much more success delivering email
from a static IPv4 address than from an IPv6 address

>(Especially given the inertia that likely exists with such rules, 
>changing the rules now may be necessary to ensure smooth operation in a 
>year or two)

the inertia is I suspect merely in the people whose views go to the
consensus as to what is "a wise way to set up your email"... it may be
that they miss changes, but I doubt that you will do considerably worse
by using IPv4 for some time to come

>> *  Make sure that your IP address is not listed in the PBL
>
>I suspect that this is something that sites will have less and less 
>control over in the future, at least in IPv4 space, especially given the 
>"marketplace" in IPv4 prefixes and the need to have different sites' 
>addresses in different IPv4 subnets (also has to do with limitations of 
>DNS in-addr.arpa delegation).

I think you may misunderstand the nature of the PBL ... this is
basically telling you that if you are using IPv4 addresses handed out by
a consumer ISP then you are going to have to ensure that they don't
settle for a quiet life for their abuse@ team by listing all their
assets

>> *  Your system should say HELO (or EHLO) with its hostname
>
>Could use better definition of "its hostname".   Suspect you mean EHLO 
>name should match PTR lookup of client's source IP address.

the document I'm quoting from has a paragraph or so of explanatory text
accompanying each of the bullet points -- so although those bullet
points should resonate with everyone here, to make really good use of
the advice you would need the whole thing

>IMO that might be a bit limiting - I would really like to see 

you miss the point -- the list is what you should do for success today.
It is not a manifesto for how the world should be

that said, of course there is value in identifying where success is hard
to achieve and so we should be promoting initiatives to address that

>> *  Accept reports of problems with your systems
>Is there a more recent standard for doing so than postmaster@?

if you are not reading abuse@ and security@ as well (and paying
attention to email coming in to pretty much any email address in whois
data (for IP or domains) then more fool you

- -- 
richard                                                  Richard Clayton

Those who would give up essential Liberty, to purchase a        Benjamin
little temporary Safety, deserve neither Liberty nor Safety.    Franklin

-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1

iQA/AwUBX3omg92nQQHFxEViEQLzsACgoA1gun5JyPcY+bbOLZtgEdrBwlQAnR8J
w1o6S2SykKDcVXCNSxcuZ4UU
=3JMh
-----END PGP SIGNATURE-----