From: Richard Kettlewell on 5 Aug 2010 07:58 eastender <nospam(a)nospam.com> writes: > Richard Kettlewell <rjk(a)greenend.org.uk> wrote: >> What really matters is the return path, not the From: header, in any >> case. > > Surely the From: email address is the return path? They often match, but don't have to. -- http://www.greenend.org.uk/rjk/
From: Chris Ridd on 5 Aug 2010 09:04 On 2010-08-05 12:58:37 +0100, Richard Kettlewell said: > eastender <nospam(a)nospam.com> writes: >> Richard Kettlewell <rjk(a)greenend.org.uk> wrote: > >>> What really matters is the return path, not the From: header, in any >>> case. >> >> Surely the From: email address is the return path? > > They often match, but don't have to. The difference is that in SMTP the addresses are on the "envelope", which are separate from the message content. The actual message (content) your client receives can bear no resemblance to the envelope. -- Chris
From: Paul Womar on 6 Aug 2010 03:47 Chris Ridd <chrisridd(a)mac.com> wrote: > The from addresses you configure for each account should match that > account. I can't send "from" chrisridd(a)mac.com using the VM SMTP > server, only using the MobileMe SMTP server. Things may have changed in the 5 odd years since I was on Virgin (Telewest as it was) but they always used to let you, as did Demon, Easynet, Compuserve (i think), Netscape Online and Orange. > Being able to mix and match would be very insecure and lead to things > like account spoofing. Potentially, but most allow it because it's a requirement for an increasing numbers of customers, people who have an ISP mail account and also want to send fromt heir mobile phones or people with their own domain for example. > What if I could authenticate to VM SMTP and send "from" steve(a)mac.com? > How would VM's SMTP server know this was a > legitimate thing for it to do? It would be very convenient for you and if it was not legitimate they can terminate your account. If you think looking at sending addresses is a good way of stopping spam then you aren't doing it right. > ISPs are also publishing SPF records in DNS, which allows ISPs to say > that mail from their particular domain (isp.com) *can* only come > legitimately from one of their SMTP servers. Sending "from" > chrisridd(a)mac.com using a VM SMTP server would violate that. SPF records have been around for ages and thankfully haven't really taken off massively. In the specific case of mac.com it would only generate a soft fail which should not in itself, be enough for it to fail. I don't particularly like SPF anyway but it is really only useful for organisations that know exactly who can use the domain and how they are sending mails, for an ISP it seems like a mistake to use them, thankfully having just looked at a few, most of them don't publish them, AOL have them published as neutral (same as not publishing any) and the 2 I found that publish them only indicate a soft fail. -- -> The email address used in this message *IS* valid <-
From: Paul Womar on 6 Aug 2010 03:54
Paul Womar <{$PW$}@womar.co.uk> wrote: > Chris Ridd <chrisridd(a)mac.com> wrote: > > > The from addresses you configure for each account should match that > > account. I can't send "from" chrisridd(a)mac.com using the VM SMTP > > server, only using the MobileMe SMTP server. > > Things may have changed in the 5 odd years since I was on Virgin > (Telewest as it was) but they always used to let you, as did Demon, > Easynet, Compuserve (i think), Netscape Online and Orange. Just seen your post about Virgin switching to Gmail, which I guess more and more ISPs are doing. With the normal Gmail service you can set it up to allow you to send from other addresses you own, it puts the gmail account in the Sender: header which does have the unfortunate side effect of clients like Outlook claiming you've sent it 'on behalf of' but it works. -- -> The email address used in this message *IS* valid <- |