Am I right in thinking that NZTA emails are coming from a non existent hostname (mailadc.ltweb.unisys.co.nz) which is why I never get any emails from them anymore?
|
|
Typically it is only the reverse DNS (PTR) record that is matched.
I thought mail servers were set up to refuse HELO from hostnames that don't resolve, to reduce spam?
lmnop: I thought mail servers were set up to refuse HELO from hostnames that don't resolve, to reduce spam?
Any decent anti-spam system will use this as one of hundreds of heuristic decision making points. Rejecting mail on this one thing along would be extremely boneheaded.
I have no doubt that some mail admins reject on it alone, but they shouldn't.
muppet:
I have no doubt that some mail admins reject on it alone, but they shouldn't.
Rejecting on this alone used to be quite common practice in the early '00s. These days, more weighting should be given to SPF and DKIM and such bonehead mechanisms not used.
It is explicitly permitted to use address literals in HELO/EHLO and further, "SMTP systems are expected to make every reasonable effort to accept mail directed to Postmaster from any other system on the Internet". Blocking at the very first step violates that requirement IMO.
yitz:Typically it is only the reverse DNS (PTR) record that is matched.
In this case the sender IP 202.12.0.33 (in the sample I have) does have a PTR pointing to mailkdc.ltweb.unisys.co.nz and this is clearly being given in the HELO/EHLO:
Received: from Mailkdc.ltweb.unisys.co.nz ([202.12.0.33])
I'd say it's probably poor practice, but not a on its own a reason to decline to receive an email.. as others have noticed it's one of many measures but quite clunky by today's standards.
I have a contact at NZTA and will give them some feedback ;-)
|
|