From: Richard Kettlewell on
eastender <nospam(a)nospam.com> writes:
> Richard Kettlewell <rjk(a)greenend.org.uk> wrote:

>> What really matters is the return path, not the From: header, in any
>> case.
>
> Surely the From: email address is the return path?

They often match, but don't have to.

--
http://www.greenend.org.uk/rjk/
From: Chris Ridd on
On 2010-08-05 12:58:37 +0100, Richard Kettlewell said:

> eastender <nospam(a)nospam.com> writes:
>> Richard Kettlewell <rjk(a)greenend.org.uk> wrote:
>
>>> What really matters is the return path, not the From: header, in any
>>> case.
>>
>> Surely the From: email address is the return path?
>
> They often match, but don't have to.

The difference is that in SMTP the addresses are on the "envelope",
which are separate from the message content. The actual message
(content) your client receives can bear no resemblance to the envelope.
--
Chris

From: Paul Womar on
Chris Ridd <chrisridd(a)mac.com> wrote:

> The from addresses you configure for each account should match that
> account. I can't send "from" chrisridd(a)mac.com using the VM SMTP
> server, only using the MobileMe SMTP server.

Things may have changed in the 5 odd years since I was on Virgin
(Telewest as it was) but they always used to let you, as did Demon,
Easynet, Compuserve (i think), Netscape Online and Orange.

> Being able to mix and match would be very insecure and lead to things
> like account spoofing.

Potentially, but most allow it because it's a requirement for an
increasing numbers of customers, people who have an ISP mail account and
also want to send fromt heir mobile phones or people with their own
domain for example.

> What if I could authenticate to VM SMTP and send "from" steve(a)mac.com?
> How would VM's SMTP server know this was a
> legitimate thing for it to do?

It would be very convenient for you and if it was not legitimate they
can terminate your account. If you think looking at sending addresses
is a good way of stopping spam then you aren't doing it right.

> ISPs are also publishing SPF records in DNS, which allows ISPs to say
> that mail from their particular domain (isp.com) *can* only come
> legitimately from one of their SMTP servers. Sending "from"
> chrisridd(a)mac.com using a VM SMTP server would violate that.

SPF records have been around for ages and thankfully haven't really
taken off massively. In the specific case of mac.com it would only
generate a soft fail which should not in itself, be enough for it to
fail. I don't particularly like SPF anyway but it is really only useful
for organisations that know exactly who can use the domain and how they
are sending mails, for an ISP it seems like a mistake to use them,
thankfully having just looked at a few, most of them don't publish them,
AOL have them published as neutral (same as not publishing any) and the
2 I found that publish them only indicate a soft fail.

--
-> The email address used in this message *IS* valid <-
From: Paul Womar on
Paul Womar <{$PW$}@womar.co.uk> wrote:

> Chris Ridd <chrisridd(a)mac.com> wrote:
>
> > The from addresses you configure for each account should match that
> > account. I can't send "from" chrisridd(a)mac.com using the VM SMTP
> > server, only using the MobileMe SMTP server.
>
> Things may have changed in the 5 odd years since I was on Virgin
> (Telewest as it was) but they always used to let you, as did Demon,
> Easynet, Compuserve (i think), Netscape Online and Orange.

Just seen your post about Virgin switching to Gmail, which I guess more
and more ISPs are doing. With the normal Gmail service you can set it
up to allow you to send from other addresses you own, it puts the gmail
account in the Sender: header which does have the unfortunate side
effect of clients like Outlook claiming you've sent it 'on behalf of'
but it works.
--
-> The email address used in this message *IS* valid <-
First  |  Prev  | 
Pages: 1 2 3 4 5 6
Prev: Ongoing Mail problems
Next: Gmail multiple account login