testing smtpd; can someone hit me with a cluestick

[John Cosimano]

i'm testing smtpd (OpenBSD/i386 -STABLE; stock GENERIC.MP)

here're the full headers from a mail i sent from a host at $work. my
domain is cna.org , not cna.org.net . but i cannot figure out if
something i have done is appending that ``.net'' after the ``.org''. my
employer doesn't even own our equivalent .net domain, so i'm not sure
this is a mail relay or something that's configured incorrectly in our
enterprise. i've seen DNS mis-configurations append things to the end of
hostnames when you forget a dot, but i can't see how that's involved
here. but if so, please educate me.

you'll see this in the envelope from and From: and a few others.

i'm aware that there is no header rewriting at the moment, so it's
perfectly OK that the hostname isn't being stripped out. but obviously
that hostname doesn't resolve in the DNS outside of our enterprise
proper. i can't suss out if that has anything to do with what i'm
seeing though. i'm assuming that's why SpamAssassin is complaining with
UNPARSEABLE_RELAY below.

my /etc/mail/smtpd.conf is very basic:

listen on lo0
map "aliases" { source db "/etc/mail/aliases.db" }
accept for local deliver to mbox
accept for all relay via "mail.cna.org"

smtpd -n returns ``configuration OK'', so i will assume that my config
is OK. it is worth noting that mail.cna.org is a not-very-`wise' product
from Novell that exhibits all sort of brain-deadness from time to time.
it's mangled by others; i have some 4.5 boxen still on base sendmail
that behaves as i expect.

i didn't attempt to obfuscate any info in the headers, as that can
sometimes cause confusion for folks who are trying to help. any nudges
in the right direction much appreciated.

final note: i'm using /usr/bin/mail -v to send these test messages.

(sorry for the odd line wraps)

From jmc@...  Thu Nov  5 18:42:35 2009
Return-Path: jmc@...
Received: from sender2.cna.org (sender2.cna.org [192.189.236.25])
        by cosmicnetworks.net (8.14.3/8.14.3) with ESMTP id
nA5IgSol019411
        for <john@...>; Thu, 5 Nov 2009 18:42:29 GMT
Received: from sender.CNA.ORG (unknown [192.168.200.13])
        by sender2.cna.org (Spam & Virus Firewall) with ESMTP id
41AA0F6CA6
        for <john@...>; Thu,  5 Nov 2009 13:42:23 -0500 (EST)
Received: from sender.CNA.ORG ([192.168.200.13]) by sender2.cna.org with
ESMTP id ErZ9TZCoxVxa9fDG for <john@...>; Thu,
        05 Nov 2009 13:42:23 -0500 (EST)
Received: from radbsd1.cna.org ([192.168.156.252])
        by sender.CNA.ORG with ESMTP; Thu, 05 Nov 2009 13:42:21 -0500
X-OpenSMTPD-Loop: john@...
Received: from radbsd1.cna.org (localhost [IPv6:::1])
        by radbsd1.cna.org (OpenSMTPD) with ESMTP id
1257446540.BsYROsckto8emQkk
        for <john@...>; Thu, 5 Nov 2009 13:42:20 -0500 (EST)
Received: (from jmc@localhost, uid 1000)
        by radbsd1.cna.org
        Thu, 5 Nov 2009 13:42:20 -0500 (EST)
From: jmc <jmc@...>
Date: Thu, 5 Nov 2009 13:42:20 -0500 (EST)
Message-Id: <5400691765769033861.enqueue@...>
To: john@...
Subject: testing net
X-SMTP-Vilter-Version: 1.3.6
X-Spamd-Symbols: TVD_SPACE_RATIO,UNPARSEABLE_RELAY

laksdfjakljdfa

[Gilles Chehade-5]

i'm sorry, could you try to explain more clearly what is your issue ?
you totally confused me :/

Gilles

On Thu, Nov 05, 2009 at 02:41:06PM -0500, John Cosimano wrote:

> i'm testing smtpd (OpenBSD/i386 -STABLE; stock GENERIC.MP)
>
> here're the full headers from a mail i sent from a host at $work. my
> domain is cna.org , not cna.org.net . but i cannot figure out if
> something i have done is appending that ``.net'' after the ``.org''. my
> employer doesn't even own our equivalent .net domain, so i'm not sure
> this is a mail relay or something that's configured incorrectly in our
> enterprise. i've seen DNS mis-configurations append things to the end of
> hostnames when you forget a dot, but i can't see how that's involved
> here. but if so, please educate me.
>
> you'll see this in the envelope from and From: and a few others.
>
> i'm aware that there is no header rewriting at the moment, so it's
> perfectly OK that the hostname isn't being stripped out. but obviously
> that hostname doesn't resolve in the DNS outside of our enterprise
> proper. i can't suss out if that has anything to do with what i'm
> seeing though. i'm assuming that's why SpamAssassin is complaining with
> UNPARSEABLE_RELAY below.
>
> my /etc/mail/smtpd.conf is very basic:
>
> listen on lo0
> map "aliases" { source db "/etc/mail/aliases.db" }
> accept for local deliver to mbox
> accept for all relay via "mail.cna.org"
>
> smtpd -n returns ``configuration OK'', so i will assume that my config
> is OK. it is worth noting that mail.cna.org is a not-very-`wise' product
> from Novell that exhibits all sort of brain-deadness from time to time.
> it's mangled by others; i have some 4.5 boxen still on base sendmail
> that behaves as i expect.
>
> i didn't attempt to obfuscate any info in the headers, as that can
> sometimes cause confusion for folks who are trying to help. any nudges
> in the right direction much appreciated.
>
> final note: i'm using /usr/bin/mail -v to send these test messages.
>
> (sorry for the odd line wraps)
>
> From jmc@...  Thu Nov  5 18:42:35 2009
> Return-Path: jmc@...
> Received: from sender2.cna.org (sender2.cna.org [192.189.236.25])
>         by cosmicnetworks.net (8.14.3/8.14.3) with ESMTP id
> nA5IgSol019411
>         for <john@...>; Thu, 5 Nov 2009 18:42:29 GMT
> Received: from sender.CNA.ORG (unknown [192.168.200.13])
>         by sender2.cna.org (Spam & Virus Firewall) with ESMTP id
> 41AA0F6CA6
>         for <john@...>; Thu,  5 Nov 2009 13:42:23 -0500 (EST)
> Received: from sender.CNA.ORG ([192.168.200.13]) by sender2.cna.org with
> ESMTP id ErZ9TZCoxVxa9fDG for <john@...>; Thu,
>         05 Nov 2009 13:42:23 -0500 (EST)
> Received: from radbsd1.cna.org ([192.168.156.252])
>         by sender.CNA.ORG with ESMTP; Thu, 05 Nov 2009 13:42:21 -0500
> X-OpenSMTPD-Loop: john@...
> Received: from radbsd1.cna.org (localhost [IPv6:::1])
>         by radbsd1.cna.org (OpenSMTPD) with ESMTP id
> 1257446540.BsYROsckto8emQkk
>         for <john@...>; Thu, 5 Nov 2009 13:42:20 -0500 (EST)
> Received: (from jmc@localhost, uid 1000)
>         by radbsd1.cna.org
>         Thu, 5 Nov 2009 13:42:20 -0500 (EST)
> From: jmc <jmc@...>
> Date: Thu, 5 Nov 2009 13:42:20 -0500 (EST)
> Message-Id: <5400691765769033861.enqueue@...>
> To: john@...
> Subject: testing net
> X-SMTP-Vilter-Version: 1.3.6
> X-Spamd-Symbols: TVD_SPACE_RATIO,UNPARSEABLE_RELAY
>
> laksdfjakljdfa
>

--
Gilles Chehade
freelance developer/sysadmin/consultant

                   http://www.poolp.org

[John Cosimano]

--- Gilles Chehade [Fri, Nov 06, 2009 at 05:21:53PM +0100]: ---
> i'm sorry, could you try to explain more clearly what is your issue ?
> you totally confused me :/

sorry 'bout that, sir!

here's a snippet:

> From jmc@...
                          ^^^^

this is not correct. that trailing ``.net'' is superfluous. certainly
smells like a DNS problem, but i cannot spot it. i am not certain where
it's getting appended.

telling me it's a DNS issue, and that i should look into that is a
perfectly acceptable answer. this is not happening with sendmail in
base, so i thought i might check in before looking further. i do not run
the nameservers involved.

[Gilles Chehade-5]

On Fri, Nov 06, 2009 at 11:35:29AM -0500, John Cosimano wrote:

> --- Gilles Chehade [Fri, Nov 06, 2009 at 05:21:53PM +0100]: ---
> > i'm sorry, could you try to explain more clearly what is your issue ?
> > you totally confused me :/
>
> sorry 'bout that, sir!
>
> here's a snippet:
>
> > From jmc@...
>                           ^^^^
>
> this is not correct. that trailing ``.net'' is superfluous. certainly
> smells like a DNS problem, but i cannot spot it. i am not certain where
> it's getting appended.
>
> telling me it's a DNS issue, and that i should look into that is a
> perfectly acceptable answer. this is not happening with sendmail in
> base, so i thought i might check in before looking further. i do not run
> the nameservers involved.

it is very likely a DNS / hostname setup problem, smtpd has no code to
manipulate the headers and certainly no code to append tld's ;-)

Gilles

--
Gilles Chehade
freelance developer/sysadmin/consultant

                   http://www.poolp.org