haraka.github.io icon indicating copy to clipboard operation
haraka.github.io copied to clipboard

claimed users need verification

Open kurahaupo opened this issue 1 year ago • 3 comments

Half of the claimed large-scale users seem implausible:

  • fortantispam.com has MX mail.fortantispam.com which answers "Exim"
  • mirusresearch.com has MX aspmx.l.google.com
  • threatwave.com has MX us-smtp-inbound-1.mimecast.com (along with several other SMTP server vendors & projects!);

Only cloudron.io and emailitin.com have MXes that mention Haraka in their welcome banners. They then responds to QUIT with the message closing connection. Have a jolly good day., which is also the response given by craigslist.com and duck.com so it seems reasonable to assume those four services are actually running Haraka.

Edit:

Note that these are not definitive, as services may use one mailer for inbound and a different one for outbound.

For example, as previously noted that mail.tm has MX mx.yandex.net, however in.mail.tm is indeed running Haraka (see reply below).

kurahaupo avatar Oct 14 '23 01:10 kurahaupo

We rely on those who add themselves to the list to remove themselves too. How else do you suggest we do it?Thanks for the analysis. Clearly some cleanup is called for. It’s hard for open source projects to promote themselves and show trust from large users.

baudehlo avatar Oct 14 '23 02:10 baudehlo

Only cloudron.io and emailitin.com have MXes that mention Haraka in their welcome banners.

Haraka permits users customize the welcome banner and QUIT message and we know some of our users do that. A PR that moves the "obviously no longer using" users into a past users or large users who added themselves but need verification that they're still using it as of 2023 section is welcome.

msimerson avatar Oct 17 '23 18:10 msimerson

Hello,

Mail.tm is using Haraka for handling all email stuff except for @mail.tm domain name which is used as a support desk.

JFYI there is no public email account under @mail.tm domain to prevent abuse of our domain name.

You can visit mail.tm and check yourself, it'll create an account under a different domain name which MX points to in.mail.tm where Haraka resides under Load Balancer handling 12 million emails per day.

220 in.mail.tm ESMTP Mail.tm probably ready [174 ms]
EHLO keeper-us-east-1d.mxtoolbox.com
250-in.mail.tm Hello keeper-us-east-1d.mxtoolbox.com [18.209.86.113]Haraka is at your service.
250-PIPELINING
250-8BITMIME
250-SMTPUTF8
250-SIZE 26214400
250 STARTTLS [237 ms]
MAIL FROM:<[email protected]>
250 sender <[email protected]> OK [223 ms]
RCPT TO:<[email protected]>
550 5.1.1 No such user [233 ms]

The reason is that outbound is hard and it was pretty easy & free to use Yandex for our domain name. Yes, it's quite funny that we're providing email service and still using Yandex. Why not?

Thanks!

sent avatar Oct 17 '23 18:10 sent