• Originator-Info

    From Gats@VERT/EDGOFTOM to DOVE-Net.Synchronet_Discussion on Thursday, May 21, 2015 00:56:06
    Hi all,

    Sorry for reposting this. It just occured to me that this might be a
    better place than irc for this. I see that synchronet always adds an Originator-Info header with outgoing mail that advertises too much
    information IMHO.

    There doesn't seem to be a way to disable this other than commenting
    out the appropriate line in the source and recompiling. Is there a
    reason this is sent? As far as i can see this header never made it past
    an IETF draft and isn't an official part of the protocol.

    Gats

    ---
    þ Synchronet þ Edge of Tomorrow telnet://edgeoftomorrow.eu
  • From Digital Man@VERT to Gats on Wednesday, May 20, 2015 19:10:10
    Re: Originator-Info
    By: Gats to DOVE-Net.Synchronet_Discussion on Thu May 21 2015 12:56 am

    Hi all,

    Sorry for reposting this. It just occured to me that this might be a
    better place than irc for this. I see that synchronet always adds an Originator-Info header with outgoing mail that advertises too much information IMHO.

    It's for tracking back the source of an email message. This is the commit message (mine) in CVS:
    Added the "Originator-info" header field for transmitted messages which will help track the original submission, especially when submitted via protocols other than SMTP.

    There doesn't seem to be a way to disable this other than commenting
    out the appropriate line in the source and recompiling. Is there a
    reason this is sent?

    Yes, to help track the source of emails.

    As far as i can see this header never made it past
    an IETF draft and isn't an official part of the protocol.

    That's not a problem as far I can tell.

    What exactly is your concern?

    digital man

    Synchronet "Real Fact" #54:
    Synchronet Terminal Server introduced RLogin support w/v3.00c (2000).
    Norco, CA WX: 64.2øF, 66.0% humidity, 12 mph SE wind, 0.00 inches rain/24hrs

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net
  • From Gats@VERT/EDGOFTOM to Digital Man on Thursday, May 21, 2015 11:13:51
    This is a multi-part message in MIME format.

    ----------------8984946221735158029
    Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: 8bit

    On 2015-05-21 02:10:10 +0000, Digital Man said:

    Re: Originator-Info
    By: Gats to DOVE-Net.Synchronet_Discussion on Thu May 21 2015 12:56 am

    Hi all,

    Sorry for reposting this. It just occured to me that this might be a better place than irc for this. I see that synchronet always adds an Originator-Info header with outgoing mail that advertises too much information IMHO.

    It's for tracking back the source of an email message. This is the commit message (mine) in CVS:
    Added the "Originator-info" header field for transmitted messages which will help track the original submission, especially when submitted via protocols other than SMTP.

    There doesn't seem to be a way to disable this other than commenting
    out the appropriate line in the source and recompiling. Is there a
    reason this is sent?

    Yes, to help track the source of emails.

    As far as i can see this header never made it past
    an IETF draft and isn't an official part of the protocol.

    That's not a problem as far I can tell.

    What exactly is your concern?

    If you telnet to the bbs from an interal network (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and
    hostname is sent out to the world. Maybe i'm being paranoid but
    shouldn't this be filtered out?



    digital man

    Synchronet "Real Fact" #54:
    Synchronet Terminal Server introduced RLogin support w/v3.00c (2000).
    Norco, CA WX: 64.2øF, 66.0% humidity, 12 mph SE wind, 0.00 inches rain/24hrs

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net

    ----------------8984946221735158029
    Content-Type: text/html; charset=iso-8859-1
    Content-Transfer-Encoding: 8bit

    <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
    <meta http-equiv="Content-Style-Type" content="text/css">
    <title></title>
    <meta name="Generator" content="Cocoa HTML Writer">
    <meta name="CocoaVersion" content="1347.57">
    <style type="text/css">
    p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; line-height: 15.0px; font: 12.0px Helvetica; color: #000000}
    p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; line-height: 15.0px; font: 12.0px Helvetica; color: #000000; min-height: 14.0px}
    p.p3 {margin: 0.0px 0.0px 0.0px 12.0px; line-height: 14.0px; font: 12.0px Helvetica; color: #011892}
    p.p4 {margin: 0.0px 0.0px 0.0px 12.0px; line-height: 14.0px; font: 12.0px Helvetica; color: #011892; min-height: 14.0px}
    p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; line-height: 14.0px; font: 12.0px Helvetica; min-height: 14.0px}
    p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; line-height: 14.0px; font: 14.0px Helvetica; color: #000000; -webkit-text-stroke: #000000}
    p.p7 {margin: 0.0px 0.0px 0.0px 0.0px; line-height: 14.0px; font: 12.0px Helvetica; color: #000000; min-height: 14.0px}
    span.s1 {font: 12.0px Helvetica; color: #000000; -webkit-text-stroke: 0px #000000}
    span.s2 {font-kerning: none; background-color: #f9f9f9}
    </style>
    </head>
    <body>
    <p class="p1">On 2015-05-21 02:10:10 +0000, Digital Man said:</p>
    <p class="p2"><br></p>
    <p class="p3"><span class="Apple-converted-space">  </span>Re: Originator-Info</p>
    <p class="p3"><span class="Apple-converted-space">  </span>By: Gats to DOVE-Net.Synchronet_Discussion on Thu May 21 2015 12:56 am</p>
    <p class="p4"><br></p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; Hi all,</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt;</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; Sorry for reposting this. It just occured to me that this might be a</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; better place than irc for this. I see that synchronet always adds an</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; Originator-Info header with outgoing mail that advertises too much</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; information IMHO.</p>
    <p class="p4"><br></p>
    <p class="p3">It's for tracking back the source of an email message. This is the commit<span class="Apple-converted-space"> </span></p>
    <p class="p3">message (mine) in CVS:</p>
    <p class="p3">Added the "Originator-info" header field for transmitted messages which will</p>
    <p class="p3">help track the original submission, especially when submitted via protocols</p>
    <p class="p3">other than SMTP.</p>
    <p class="p4"><br></p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; There doesn't seem to be a way to disable this other than commenting</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; out the appropriate line in the source and recompiling. Is there a</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; reason this is sent?</p>
    <p class="p4"><br></p>
    <p class="p3">Yes, to help track the source of emails.</p>
    <p class="p4"><br></p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; As far as i can see this header never made it past</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; an IETF draft and isn't an official part of the protocol.</p>
    <p class="p4"><br></p>
    <p class="p3">That's not a problem as far I can tell.</p>
    <p class="p4"><br></p>
    <p class="p3">What exactly is your concern?</p>
    <p class="p5"><br></p>
    <p class="p6"><span class="s1">If you telnet to the bbs from an interal network (</span><span class="s2">10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and hostname is sent out to the world. Maybe i'm being paranoid but shouldn't this be filtered out?</span></p>
    <p class="p5"><br></p>
    <p class="p5"><br></p>
    <p class="p4"><br></p>
    <p class="p3"><span class="Apple-converted-space">                                            </span>digital man</p>
    <p class="p4"><br></p>
    <p class="p3">Synchronet "Real Fact" #54:</p>
    <p class="p3">Synchronet Terminal Server introduced RLogin support w/v3.00c (2000).</p>
    <p class="p3">Norco, CA WX: 64.2øF, 66.0% humidity, 12 mph SE wind, 0.00 inches rain/24hrs</p>
    <p class="p4"><br></p>
    <p class="p3">---</p>
    <p class="p3"><span class="Apple-converted-space"> </span>þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net</p>
    <p class="p7"><br></p>
    </body>
    </html>
    ----------------8984946221735158029--

    ---
    þ Synchronet þ Edge of Tomorrow telnet://edgeoftomorrow.eu
  • From Digital Man@VERT to Gats on Thursday, May 21, 2015 17:13:16
    Re: Re: Originator-Info
    By: Gats to Digital Man on Thu May 21 2015 11:13 am

    What exactly is your concern?

    If you telnet to the bbs from an interal network (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and hostname is sent out to the world. Maybe i'm being paranoid but
    shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're sending emails to. I don't see any risk.

    digital man

    Synchronet "Real Fact" #62:
    "Baja" (name of Synchronet PCMS compiler/languege) is pronounced "ba-ha". Norco, CA WX: 66.2øF, 55.0% humidity, 4 mph E wind, 0.00 inches rain/24hrs

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net
  • From Gats@VERT/EDGOFTOM to Digital Man on Friday, May 22, 2015 11:33:32
    On 2015-05-22 00:13:16 +0000, Digital Man said:

    Re: Re: Originator-Info
    By: Gats to Digital Man on Thu May 21 2015 11:13 am

    What exactly is your concern?

    If you telnet to the bbs from an interal network (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and hostname is sent out to the world. Maybe i'm being paranoid but
    shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're sending emails to. I don't see any risk.

    digital man

    Synchronet "Real Fact" #62:
    "Baja" (name of Synchronet PCMS compiler/languege) is pronounced "ba-ha". Norco, CA WX: 66.2°F, 55.0% humidity, 4 mph E wind, 0.00 inches rain/24hrs

    ---
    â–  Synchronet â–  Vertrauen â–  Home of Synchronet â–  telnet://vert.synchro.net

    Maybe I am being a bit paranoid here, but the less superfluous
    information in my emails headers the better as far as i'm concerned. At
    the top of your head, would commenting out this header in the source
    and recompiling break anything in Synchronet?

    ---
    þ Synchronet þ Edge of Tomorrow telnet://edgeoftomorrow.eu
  • From KenDB3@VERT/KD3NET to Gats on Friday, May 22, 2015 08:00:26
    Ga> If you telnet to the bbs from an interal network
    Ga> (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and
    Ga> hostname is sent out to the world. Maybe i'm being paranoid but
    Ga> shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're sending emails to. I don't see any risk.

    I work for an ISP, and our SMTP server does the same thing. The headers have this line when I send out a message from Thunderbird on my machine at home over to my Gmail (or the BBS) account:

    Received: from [192.168.1.100] ([68.228.145.200])

    So, you can see exactly what internal IP I am coming from. In fact, I've seen where this can help people troubleshoot when spam is coming from their network and they don't know what machine is infected.

    ~KenDB3

    ---
    þ Synchronet þ KD3net-Rhode Island's only BBS about nothing. http://bbs.kd3.us
  • From Digital Man@VERT to Gats on Friday, May 22, 2015 14:38:07
    Re: Re: Originator-Info
    By: Gats to Digital Man on Fri May 22 2015 11:33 am

    On 2015-05-22 00:13:16 +0000, Digital Man said:

    Re: Re: Originator-Info
    By: Gats to Digital Man on Thu May 21 2015 11:13 am

    What exactly is your concern?

    If you telnet to the bbs from an interal network (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and hostname is sent out to the world. Maybe i'm being paranoid but shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're sending emails to. I don't see any risk.

    Maybe I am being a bit paranoid here, but the less superfluous
    information in my emails headers the better as far as i'm concerned. At
    the top of your head, would commenting out this header in the source
    and recompiling break anything in Synchronet?

    No, it wouldn't break anything.

    digital man

    Synchronet "Real Fact" #0:
    Development began in 1990 of the (unnamed at the time) Synchronet BBS software. Norco, CA WX: 61.0øF, 66.0% humidity, 8 mph ENE wind, 0.00 inches rain/24hrs

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net
  • From Mro@VERT/BBSESINF to KenDB3 on Friday, May 22, 2015 21:54:34
    Re: Re: Originator-Info
    By: KenDB3 to Gats on Fri May 22 2015 08:00 am


    So, you can see exactly what internal IP I am coming from. In fact, I've seen where this can help people troubleshoot when spam is coming from their network and they don't know what machine is infected.


    that's a very good point.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
  • From Gats@VERT/EDGOFTOM to Digital Man on Sunday, May 24, 2015 20:17:11
    On 2015-05-22 21:38:07 +0000, Digital Man said:

    Re: Re: Originator-Info
    By: Gats to Digital Man on Fri May 22 2015 11:33 am

    On 2015-05-22 00:13:16 +0000, Digital Man said:

    Re: Re: Originator-Info
    By: Gats to Digital Man on Thu May 21 2015 11:13 am

    What exactly is your concern?

    If you telnet to the bbs from an interal network (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and hostname is sent out to the world. Maybe i'm being paranoid but shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're
    sending emails to. I don't see any risk.

    Maybe I am being a bit paranoid here, but the less superfluous
    information in my emails headers the better as far as i'm concerned. At the top of your head, would commenting out this header in the source
    and recompiling break anything in Synchronet?

    No, it wouldn't break anything.

    digital man

    Synchronet "Real Fact" #0:
    Development began in 1990 of the (unnamed at the time) Synchronet BBS software.
    Norco, CA WX: 61.0øF, 66.0% humidity, 8 mph ENE wind, 0.00 inches rain/24hrs

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net

    ok, thanks!

    ---
    þ Synchronet þ Edge of Tomorrow telnet://edgeoftomorrow.eu
  • From Gats@VERT/EDGOFTOM to KenDB3 on Sunday, May 24, 2015 20:17:52
    On 2015-05-22 12:00:26 +0000, KenDB3 said:

    Ga> If you telnet to the bbs from an interal network
    Ga> (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and
    Ga> hostname is sent out to the world. Maybe i'm being paranoid but
    Ga> shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're
    sending emails to. I don't see any risk.

    I work for an ISP, and our SMTP server does the same thing. The headers have this line when I send out a message from Thunderbird on my machine at home over
    to my Gmail (or the BBS) account:

    Received: from [192.168.1.100] ([68.228.145.200])

    So, you can see exactly what internal IP I am coming from. In fact, I've seen where this can help people troubleshoot when spam is coming from their network
    and they don't know what machine is infected.

    ~KenDB3

    ---
    â–  Synchronet â–  KD3net-Rhode Island's only BBS about nothing. http://bbs.kd3.us

    I can see how this is handy. But that's not really pertinent for my
    home network :-)

    ---
    þ Synchronet þ Edge of Tomorrow telnet://edgeoftomorrow.eu
  • From Mro@VERT/BBSESINF to Gats on Sunday, May 24, 2015 14:25:15
    Re: Re: Originator-Info
    By: Gats to KenDB3 on Sun May 24 2015 08:17 pm


    So, you can see exactly what internal IP I am coming from. In fact, I've seen where this can help people troubleshoot when spam is coming from their network and they don't know what machine is infected.

    I can see how this is handy. But that's not really pertinent for my
    home network :-)


    that you think right now, that might not be necessarily true.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::