Re: goodbye

[Davide Libenzi <davidel@xmailserver.org>]

On 08-Apr-2001 Rogier Wolff wrote:
> Matti Aarnio wrote:
>> On Sun, Apr 08, 2001 at 02:10:52PM +0900, kumon@flab.fujitsu.co.jp wrote:
>> > How about creating an additional ML,
>> > the new ML (say LKML-DUL) is used to send mails from DUL to LKML, but
>> > such mails are not sent to LMKL.
>> 
>>      Layering and technology problem.
>> 
>>      SMTP receiver does those RBL/DUL/ORBS analysis, and its policy
>>      control does not know where exactly the email is heading into
>>      (that is, the reception policy is system level, not by recipients.)
> 
> Then fix it!
> 
> SMTP receivers should have the option of inserting a header line
> instead of blocking "bad" Emails. Then other layers can decide what to
> do with this Email.

I had the same problem of shifting down along the mail chain the knowledge of
the incoming IP address.
We develop VirusScreening and ContentFiltering MTA ( and appliances ) that
usually goes in front of customers MTA.
By putting our MTA in front of the customer MTAs chain We hide the peer IP
address to MTAs that comes next in the mail chain.
Our MTA uses a new ESMTP command :

XRMTIP remote-ip-address

to let customers MTA to know the remote IP address and let them to take all
relay and generic permissions decisions about the mail path.
We're going to distribute patches for most common MTAs like qmail, sendmail,
exim, XMail and postfix.
The patch rely on the presence of a file ( /etc/xrmtip.hosts ) that list the IPs
from which the XRMTIP command sould be accepted.



- Davide