On Tue, 10 Apr 2007, Junio C Hamano wrote:
One thing that people need to be careful about is which SMTP
server they use.
ABSOLUTELY!
There are a ton of spam blockers that simply *refuse* to accept email from
people who just randomly send to port 25.
For example, I will personally never see email that comes directly to my
email address though an open mail relay *or* from something that appears
to be just a random botnet PC (I forget the exact rule, since I'm hapily
ignorant of MIS, but I think it boils down to requiring a good reverse DNS
lookup).
That's getting much more common. Most spam is done through botnets, and
they still try to do the direct-to-port-25 thing, exactly because if you
go through a *real* SMTP host, your ISP will generally shut you down
pretty quickly if you're spamming.
So special spammers with their own machines will work with ISP's that
don't care (they make money off the spammers), but botnets depend on
cracked Windows machines, and those often have ISP's that *do* care,
because they get complaints and it costs them money if they don't.
I had an impression (I do not use send-email myself) that it defaulted
to local MTA, so the mail trail would look like your local MTA receives
from the MUA (which is send-email), which forwards it to whereever
destination (or intermediaries).
A lot of people configure their MUA to send specially, and never even
configure their MTA at all apart from whatever default configuration it
has.
For example, I may have sendmail installed on my machine, but its only
purpose in life is to do *local* email delivery (using fetchmail ->
sendmail). It wouldn't know how to send an email outside of the machine.
Instead, my MUA is configured to do this:
# List of SMTP servers for sending mail. If blank: Unix Pine uses sendmail.
smtp-server=localhost:10025
where localhost port 10025 is just a ssh tunnel to inside the osdl
network. If I tried to send email any other way, people would often not
accept it, because various SMTP servers will simply *refuse* to forward
emails that claim to be coming from a point that isn't somethign that they
actually *receive* email for.
And I don't think my setup is at all unusual. I may be unusual in my
choice of MUA, but most MUA's will have configuration for where to send
the mail, and I think very few people actually configure sendmail to do it
right.
So no, I don't think people should assume that "sendmail" magically knows
how to send emails other than to the local machine (ie use it to send
problem reports to "root", or let fetchmail deliver to it for local
emails, but that's about it)
Linus