Thanks Carlo! Looks like this test would not be good for a relay that accepts mail from MUAs. However, it would probably be good if one only expects traffic from MTAs - like gateways. I am surprised to see Exchange and GroupWise. For Exchange, the OS must not have the default suffix configured. Misconfigurations are worth adding a point or two though. I have always setup mailservers with a hostname of host.some.domain rather than just host. I guess that is not common(?).
Please let me know if anyone disagrees with this line of reasoning. Thanks again Carlo! --Larry > -----Original Message----- > From: Carlo Wood > On Mon, Aug 25, 2003 at 09:58:42AM -0400, Larry Gilson wrote: > > In reality, does anyone know > of legitimate MUAs > > or MTAs that do not form message IDs as @some.domain? > > ~/Mail>egrep '^(Message-ID:|X-Mailer:)' * | grep -v > ':Message-ID:[EMAIL PROTECTED]' | grep -A1 'Message-ID:' | grep > 'X-Mailer:' | sed -e 's/^[^:]*://' | sort -u > X-Mailer: Balsa 0.8.0 > X-Mailer: ELM [version 2.4ME+ PL72 (25)] > X-Mailer: ELM [version 2.4 PL23] > X-Mailer: ELM [version 2.5 PL1] > X-Mailer: exmh version 2.5 07/13/2001 > X-Mailer: Gnus v5.5/XEmacs 20.4 - "Emerald" > X-Mailer: IMP/PHP3 Imap webMail Program 1.99.1.44 > X-Mailer: Internet Mail Service (5.0.1457.3) > X-Mailer: Internet Mail Service (5.0.1458.49) > X-Mailer: Internet Mail Service (5.5.2448.0) > X-Mailer: Internet Mail Service (5.5.2653.19) > X-Mailer: Mew version 1.95b91 on XEmacs 21.1.12 (Channel Islands) > X-Mailer: Microsoft CDO for Windows 2000 > X-Mailer: Microsoft Outlook, Build 10.0.2616 > X-Mailer: Microsoft Outlook, Build 10.0.2627 > X-Mailer: Microsoft Outlook, Build 10.0.3416 > X-Mailer: Microsoft Outlook, Build 10.0.4024 > X-Mailer: Microsoft Outlook, Build 10.0.4510 > X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2910.0) > X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) > X-Mailer: Microsoft Outlook Express 4.71.1712.3 > X-Mailer: Microsoft Outlook Express 4.72.3110.5 > X-Mailer: Microsoft Outlook Express 5.00.2314.1300 > X-Mailer: Microsoft Outlook Express 5.00.2615.200 > X-Mailer: Microsoft Outlook Express 5.00.2919.6600 > X-Mailer: Microsoft Outlook Express 5.00.2919.6700 > X-Mailer: Microsoft Outlook Express 5.50.3825.400 > X-Mailer: Microsoft Outlook Express 5.50.4133.2400 > X-Mailer: Microsoft Outlook Express 5.50.4522.1200 > X-Mailer: Microsoft Outlook Express 5.50.4807.1700 > X-Mailer: Microsoft Outlook Express 6.00.2600.0000 > X-Mailer: Microsoft Outlook Express 6.00.2720.3000 > X-Mailer: Microsoft Outlook Express 6.00.2800.1106 > X-Mailer: Microsoft Outlook Express 6.00.2800.1158 > X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) > X-Mailer: MIME-tools 5.41 (Entity 5.404) > X-Mailer: Mozilla 4.72 [en] (X11; I; HP-UX B.10.20 9000/712) > X-Mailer: Mulberry/3.0.2 (Win32) > X-Mailer: Mutt 0.93.2i > X-Mailer: Mutt 0.93i > X-Mailer: Mutt/1.3.14i - Linux 2.4.2 > X-Mailer: Novell GroupWise 5.5.5 > X-Mailer: PostOffice 0.7 > X-Mailer: Post Office 0.7.2 build 20000401(by [EMAIL PROTECTED] > 2000/04/01 11:35:08) > X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0 > X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 > X-Mailer: QUALCOMM Windows Eudora Version 5.1 > X-Mailer: Sylpheed version 0.8.10 (GTK+ 1.2.10; i686-pc-linux-gnu) > X-Mailer: Sylpheed version 0.8.5 (GTK+ 1.2.10; i386-redhat-linux) > X-Mailer: TkMail 4.0beta7 > X-Mailer: VM 6.43 under 20.4 "Emerald" XEmacs Lucid > X-Mailer: Windows Eudora Light Version 3.0.1 (16) > X-Mailer: Windows Eudora Pro Version 3.0 (32) > > All of these legit mails contain something like: > > Message-ID: <[EMAIL PROTECTED]> > > Where, I think, the part after the '@' is the hostname without domain. > > After all... > > >hostname > ansset > > -- > Carlo Wood <[EMAIL PROTECTED]> > ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
