Re:STARTTLS Everywhere
by chrismorgan on Tuesday June 26, 2018 @12:21AM
(#17397840)
This doesn’t seem to be working properly. Domains that I try are saying “couldn’t connect”, e.g. https://starttls-everywhere.org/results/?fastmail.com
[ Parent
| on HN ]
Re:STARTTLS Everywhere
by marcbradshaw on Tuesday June 26, 2018 @05:27AM
(#17399068)
The starttls-everywhere IP connects, tries a bunch of commands which don't look at all like a regular mail connection. It cycles through a bunch of tls settings and never sends an email.
In short, it got itself blocked by anti-spam measures.
I think there is an error in their SPF configuration.
"v=spf1 ip4:67.212.170.242 -all"
But verification connections come from a different address.
Re:STARTTLS Everywhere
by chrismorgan on Tuesday June 26, 2018 @12:39AM
(#17397898)
I’m confused. This is nothing to do with SPF (it’s failing to connect in the first place), and what domain is that SPF record for anyway?
dig txt starttls-everywhere.org
;; ANSWER SECTION:
starttls-everywhere.org. 599 IN TXT "v=spf1 ip4:67.212.170.242 -all"
My server was dropping the connection after EHLO because they were connecting from a different IP address and specified -all in the SPF record. Maybe you are seeing a different issue.
Yeah, he is having a different issue.
He's entering "fastmail.com" into the form on the web site then the EFF's server is trying to connect to (at least one of) FastMail's MX hosts but is unable to establish a connection.
As OP said, what he is seeing has nothing to do with SPF.
(Side note: I'm a mail admin and I'm pretty strict, but even I don't drop anyone after HELO/EHLO. I'm not surprised you're having issues.)