Re: header-munging

"D. J. Bernstein" <djb@koobera.math.uic.edu> Wed, 25 September 1996 18:28 UTC

Received: from cnri by ietf.org id aa03941; 25 Sep 96 14:28 EDT
Received: from list.cren.net by CNRI.Reston.VA.US id aa01081; 25 Sep 96 14:28 EDT
Received: from localhost (localhost.0.0.127.in-addr.arpa [127.0.0.1]) by list.cren.net (8.7.6/8.6.12) with SMTP id NAA09645; Wed, 25 Sep 1996 13:38:11 -0400 (EDT)
Received: from koobera.math.uic.edu (KOOBERA.MATH.UIC.EDU [128.248.178.247]) by list.cren.net (8.7.6/8.6.12) with SMTP id NAA09633 for <ietf-smtp@list.cren.net>; Wed, 25 Sep 1996 13:38:07 -0400 (EDT)
Received: (qmail 15747 invoked by uid 666); 25 Sep 1996 17:42:54 -0000
Message-Id: <19960925174254.15746.qmail@koobera.math.uic.edu>
Date: Wed, 25 Sep 1996 17:42:54 -0000
Sender: owner-ietf-smtp@list.cren.net
Precedence: bulk
From: "D. J. Bernstein" <djb@koobera.math.uic.edu>
To: ietf-smtp@list.cren.net
Subject: Re: header-munging
X-Listprocessor-Version: 8.1 -- ListProcessor(tm) by CREN

> I've had 5 that got mangled into
> 'null@transport-server.bitnet' just because transport-server.whatever.the.heck
> didn't see fit to fully qualify its domain name....

This is just a minor variant of the situation that I already described:

:    Sender: joe ---> fast SMTP server ---> sendmail ---> Sender: joe@utk.edu
:    (at brl.mil)     (at brl.mil)          (at utk.edu)          (wrong!)
: 
: Everyone agrees that (1) the sender (Netscape, in this case) is
: producing an invalid message, and (2) sendmail, by trying to fix it, is
: making it even worse.
: 
: The situation changes completely when you replace the first SMTP link
: with the mail-injection protocol that we're discussing. Then Netscape
: isn't doing anything wrong. The server will fix up the Sender address.
: The SMTP violations disappear. Everybody's happy.

The only difference in your case is that the ``fast SMTP server'' is
replaced by ``slow, obsolete SMTP server that fills in an unqualified
domain name.'' The remaining comments apply.

> You tell me how the SMTP server at vtbit.cc.vt.edu can
> *reliably* tell what the domain name is,

Although this _sounds_ the same as Keith's frivolous objection, it's
actually a completely different objection.

Keith was talking about an injection server. You're talking about an
SMTP server.

Everyone agrees that a mailed message must conform to RFC 822. A client
has no business sending unqualified domain names to your SMTP server.
This, however, has no relevance to a mail-injection protocol.

---Dan