1. Forum
  2. DOVE-Net
  3. Synchronet Discussion

  • Originator-Info

    From Gats@VERT to DOVE-Net.Synchronet_Discussion on Thu May 21 00:56:06 2015
    Hi all,

    Sorry for reposting this. It just occured to me that this might be a
    better place than irc for this. I see that synchronet always adds an Originator-Info header with outgoing mail that advertises too much
    information IMHO.

    There doesn't seem to be a way to disable this other than commenting
    out the appropriate line in the source and recompiling. Is there a
    reason this is sent? As far as i can see this header never made it past
    an IETF draft and isn't an official part of the protocol.

    Gats

    ---
    þ Synchronet þ Edge of Tomorrow telnet://edgeoftomorrow.eu
  • From Digital Man@VERT to Gats on Wed May 20 19:10:10 2015
    Re: Originator-Info
    By: Gats to DOVE-Net.Synchronet_Discussion on Thu May 21 2015 12:56 am

    Hi all,

    Sorry for reposting this. It just occured to me that this might be a
    better place than irc for this. I see that synchronet always adds an Originator-Info header with outgoing mail that advertises too much information IMHO.

    It's for tracking back the source of an email message. This is the commit message (mine) in CVS:
    Added the "Originator-info" header field for transmitted messages which will help track the original submission, especially when submitted via protocols other than SMTP.

    There doesn't seem to be a way to disable this other than commenting
    out the appropriate line in the source and recompiling. Is there a
    reason this is sent?

    Yes, to help track the source of emails.

    As far as i can see this header never made it past
    an IETF draft and isn't an official part of the protocol.

    That's not a problem as far I can tell.

    What exactly is your concern?

    digital man

    Synchronet "Real Fact" #54:
    Synchronet Terminal Server introduced RLogin support w/v3.00c (2000).
    Norco, CA WX: 64.2øF, 66.0% humidity, 12 mph SE wind, 0.00 inches rain/24hrs
  • From Gats@VERT to Digital Man on Thu May 21 11:13:51 2015
    This is a multi-part message in MIME format.

    ----------------8984946221735158029
    Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: 8bit

    On 2015-05-21 02:10:10 +0000, Digital Man said:

    Re: Originator-Info
    By: Gats to DOVE-Net.Synchronet_Discussion on Thu May 21 2015 12:56 am

    Hi all,

    Sorry for reposting this. It just occured to me that this might be a better place than irc for this. I see that synchronet always adds an Originator-Info header with outgoing mail that advertises too much information IMHO.

    It's for tracking back the source of an email message. This is the commit message (mine) in CVS:
    Added the "Originator-info" header field for transmitted messages which will help track the original submission, especially when submitted via protocols other than SMTP.

    There doesn't seem to be a way to disable this other than commenting
    out the appropriate line in the source and recompiling. Is there a
    reason this is sent?

    Yes, to help track the source of emails.

    As far as i can see this header never made it past
    an IETF draft and isn't an official part of the protocol.

    That's not a problem as far I can tell.

    What exactly is your concern?

    If you telnet to the bbs from an interal network (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and
    hostname is sent out to the world. Maybe i'm being paranoid but
    shouldn't this be filtered out?



    digital man

    Synchronet "Real Fact" #54:
    Synchronet Terminal Server introduced RLogin support w/v3.00c (2000).
    Norco, CA WX: 64.2øF, 66.0% humidity, 12 mph SE wind, 0.00 inches rain/24hrs

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net

    ----------------8984946221735158029
    Content-Type: text/html; charset=iso-8859-1
    Content-Transfer-Encoding: 8bit

    <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
    <meta http-equiv="Content-Style-Type" content="text/css">
    <title></title>
    <meta name="Generator" content="Cocoa HTML Writer">
    <meta name="CocoaVersion" content="1347.57">
    <style type="text/css">
    p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; line-height: 15.0px; font: 12.0px Helvetica; color: #000000}
    p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; line-height: 15.0px; font: 12.0px Helvetica; color: #000000; min-height: 14.0px}
    p.p3 {margin: 0.0px 0.0px 0.0px 12.0px; line-height: 14.0px; font: 12.0px Helvetica; color: #011892}
    p.p4 {margin: 0.0px 0.0px 0.0px 12.0px; line-height: 14.0px; font: 12.0px Helvetica; color: #011892; min-height: 14.0px}
    p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; line-height: 14.0px; font: 12.0px Helvetica; min-height: 14.0px}
    p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; line-height: 14.0px; font: 14.0px Helvetica; color: #000000; -webkit-text-stroke: #000000}
    p.p7 {margin: 0.0px 0.0px 0.0px 0.0px; line-height: 14.0px; font: 12.0px Helvetica; color: #000000; min-height: 14.0px}
    span.s1 {font: 12.0px Helvetica; color: #000000; -webkit-text-stroke: 0px #000000}
    span.s2 {font-kerning: none; background-color: #f9f9f9}
    </style>
    </head>
    <body>
    <p class="p1">On 2015-05-21 02:10:10 +0000, Digital Man said:</p>
    <p class="p2"><br></p>
    <p class="p3"><span class="Apple-converted-space">  </span>Re: Originator-Info</p>
    <p class="p3"><span class="Apple-converted-space">  </span>By: Gats to DOVE-Net.Synchronet_Discussion on Thu May 21 2015 12:56 am</p>
    <p class="p4"><br></p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; Hi all,</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt;</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; Sorry for reposting this. It just occured to me that this might be a</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; better place than irc for this. I see that synchronet always adds an</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; Originator-Info header with outgoing mail that advertises too much</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; information IMHO.</p>
    <p class="p4"><br></p>
    <p class="p3">It's for tracking back the source of an email message. This is the commit<span class="Apple-converted-space"> </span></p>
    <p class="p3">message (mine) in CVS:</p>
    <p class="p3">Added the "Originator-info" header field for transmitted messages which will</p>
    <p class="p3">help track the original submission, especially when submitted via protocols</p>
    <p class="p3">other than SMTP.</p>
    <p class="p4"><br></p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; There doesn't seem to be a way to disable this other than commenting</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; out the appropriate line in the source and recompiling. Is there a</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; reason this is sent?</p>
    <p class="p4"><br></p>
    <p class="p3">Yes, to help track the source of emails.</p>
    <p class="p4"><br></p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; As far as i can see this header never made it past</p>
    <p class="p3"><span class="Apple-converted-space"> </span>&gt; an IETF draft and isn't an official part of the protocol.</p>
    <p class="p4"><br></p>
    <p class="p3">That's not a problem as far I can tell.</p>
    <p class="p4"><br></p>
    <p class="p3">What exactly is your concern?</p>
    <p class="p5"><br></p>
    <p class="p6"><span class="s1">If you telnet to the bbs from an interal network (</span><span class="s2">10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and hostname is sent out to the world. Maybe i'm being paranoid but shouldn't this be filtered out?</span></p>
    <p class="p5"><br></p>
    <p class="p5"><br></p>
    <p class="p4"><br></p>
    <p class="p3"><span class="Apple-converted-space">                                            </span>digital man</p>
    <p class="p4"><br></p>
    <p class="p3">Synchronet "Real Fact" #54:</p>
    <p class="p3">Synchronet Terminal Server introduced RLogin support w/v3.00c (2000).</p>
    <p class="p3">Norco, CA WX: 64.2øF, 66.0% humidity, 12 mph SE wind, 0.00 inches rain/24hrs</p>
    <p class="p4"><br></p>
    <p class="p3">---</p>
    <p class="p3"><span class="Apple-converted-space"> </span>þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net</p>
    <p class="p7"><br></p>
    </body>
    </html>
    ----------------8984946221735158029--

    ---
    þ Synchronet þ Edge of Tomorrow telnet://edgeoftomorrow.eu
  • From Digital Man@VERT to Gats on Thu May 21 17:13:16 2015
    Re: Re: Originator-Info
    By: Gats to Digital Man on Thu May 21 2015 11:13 am

    What exactly is your concern?

    If you telnet to the bbs from an interal network (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and hostname is sent out to the world. Maybe i'm being paranoid but
    shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're sending emails to. I don't see any risk.

    digital man

    Synchronet "Real Fact" #62:
    "Baja" (name of Synchronet PCMS compiler/languege) is pronounced "ba-ha". Norco, CA WX: 66.2øF, 55.0% humidity, 4 mph E wind, 0.00 inches rain/24hrs
    ---
    þ Synchronet þ Vertrauen þ Home of Synchrone
  • From Gats@VERT to Digital Man on Fri May 22 11:33:32 2015
    On 2015-05-22 00:13:16 +0000, Digital Man said:

    Re: Re: Originator-Info
    By: Gats to Digital Man on Thu May 21 2015 11:13 am

    What exactly is your concern?

    If you telnet to the bbs from an interal network (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and hostname is sent out to the world. Maybe i'm being paranoid but
    shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're sending emails to. I don't see any risk.

    digital man

    Synchronet "Real Fact" #62:
    "Baja" (name of Synchronet PCMS compiler/languege) is pronounced "ba-ha". Norco, CA WX: 66.2°F, 55.0% humidity, 4 mph E wind, 0.00 inches rain/24hrs

    ---
    â–  Synchronet â–  Vertrauen â–  Home of Synchronet â–  telnet://vert.synchro.net

    Maybe I am being a bit paranoid here, but the less superfluous
    information in my emails headers the better as far as i'm concerned. At
    the top of your head, would commenting out this header in the source
    and recompiling break anything in Synchronet?

    ---
    þ Synchronet þ Edge of Tomorrow telnet://edgeoftomorrow.eu
  • From KenDB3@VERT to Gats on Fri May 22 08:00:26 2015
    Ga> If you telnet to the bbs from an interal network
    Ga> (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and
    Ga> hostname is sent out to the world. Maybe i'm being paranoid but
    Ga> shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're sending emails to. I don't see any risk.

    I work for an ISP, and our SMTP server does the same thing. The headers have this line when I send out a message from Thunderbird on my machine at home over to my Gmail (or the BBS) account:

    Received: from [192.168.1.100] ([68.228.145.200])

    So, you can see exactly what internal IP I am coming from. In fact, I've seen where this can help people troubleshoot when spam is coming from their network and they don't know what machine is infected.

    ~KenDB3

    ---
    þ Synchronet þ KD3net-Rhode Island's only BBS about nothing. http://bbs.kd3.us
  • From Digital Man@VERT to Gats on Fri May 22 14:38:07 2015
    Re: Re: Originator-Info
    By: Gats to Digital Man on Fri May 22 2015 11:33 am

    On 2015-05-22 00:13:16 +0000, Digital Man said:

    Re: Re: Originator-Info
    By: Gats to Digital Man on Thu May 21 2015 11:13 am

    What exactly is your concern?

    If you telnet to the bbs from an interal network (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and hostname is sent out to the world. Maybe i'm being paranoid but shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're sending emails to. I don't see any risk.

    Maybe I am being a bit paranoid here, but the less superfluous
    information in my emails headers the better as far as i'm concerned. At
    the top of your head, would commenting out this header in the source
    and recompiling break anything in Synchronet?

    No, it wouldn't break anything.

    digital man

    Synchronet "Real Fact" #0:
    Development began in 1990 of the (unnamed at the time) Synchronet BBS software. Norco, CA WX: 61.0øF, 66.0% humidity, 8 mph ENE wind, 0.00 inches rain/24hrs ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ t
  • From Mro@VERT to KenDB3 on Fri May 22 21:54:34 2015
    Re: Re: Originator-Info
    By: KenDB3 to Gats on Fri May 22 2015 08:00 am


    So, you can see exactly what internal IP I am coming from. In fact, I've seen where this can help people troubleshoot when spam is coming from their network and they don't know what machine is infected.


    that's a very good point.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::
  • From Gats@VERT to Digital Man on Sun May 24 20:17:11 2015
    On 2015-05-22 21:38:07 +0000, Digital Man said:

    Re: Re: Originator-Info
    By: Gats to Digital Man on Fri May 22 2015 11:33 am

    On 2015-05-22 00:13:16 +0000, Digital Man said:

    Re: Re: Originator-Info
    By: Gats to Digital Man on Thu May 21 2015 11:13 am

    What exactly is your concern?

    If you telnet to the bbs from an interal network (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and hostname is sent out to the world. Maybe i'm being paranoid but shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're
    sending emails to. I don't see any risk.

    Maybe I am being a bit paranoid here, but the less superfluous
    information in my emails headers the better as far as i'm concerned. At the top of your head, would commenting out this header in the source
    and recompiling break anything in Synchronet?

    No, it wouldn't break anything.

    digital man

    Synchronet "Real Fact" #0:
    Development began in 1990 of the (unnamed at the time) Synchronet BBS software.
    Norco, CA WX: 61.0øF, 66.0% humidity, 8 mph ENE wind, 0.00 inches rain/24hrs

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ telnet://vert.synchro.net

    ok, thanks!

    ---
    þ Synchronet þ Edge of Tomorrow telnet://edgeoftomorrow.eu
  • From Gats@VERT to KenDB3 on Sun May 24 20:17:52 2015
    On 2015-05-22 12:00:26 +0000, KenDB3 said:

    Ga> If you telnet to the bbs from an interal network
    Ga> (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16) your hosts internal ip and
    Ga> hostname is sent out to the world. Maybe i'm being paranoid but
    Ga> shouldn't this be filtered out?

    It's not being sent "out to the world", it's being sent to whomever you're
    sending emails to. I don't see any risk.

    I work for an ISP, and our SMTP server does the same thing. The headers have this line when I send out a message from Thunderbird on my machine at home over
    to my Gmail (or the BBS) account:

    Received: from [192.168.1.100] ([68.228.145.200])

    So, you can see exactly what internal IP I am coming from. In fact, I've seen where this can help people troubleshoot when spam is coming from their network
    and they don't know what machine is infected.

    ~KenDB3

    ---
    â–  Synchronet â–  KD3net-Rhode Island's only BBS about nothing. http://bbs.kd3.us

    I can see how this is handy. But that's not really pertinent for my
    home network :-)

    ---
    þ Synchronet þ Edge of Tomorrow telnet://edgeoftomorrow.eu
  • From Mro@VERT to Gats on Sun May 24 14:25:15 2015
    Re: Re: Originator-Info
    By: Gats to KenDB3 on Sun May 24 2015 08:17 pm


    So, you can see exactly what internal IP I am coming from. In fact, I've seen where this can help people troubleshoot when spam is coming from their network and they don't know what machine is infected.

    I can see how this is handy. But that's not really pertinent for my
    home network :-)


    that you think right now, that might not be necessarily true.
    ---
    þ Synchronet þ ::: BBSES.info - fr