[Dovecot] Received header only showing localhost

[Bill Oliver]

On Thu, 29 Aug 2013, Matt Devaney wrote:

> Apologies for giving this a gentle nudge, but still confused as to where the
> headers are going / what's causing them to be removed and hoping someone may
> have some insight.
>
> Thanks,
> Matt
>

I don't know why the mailserver at wyvern.net is stripping stuff, but the reason the two at the top of the list are localhost and the name of the local box is that you have your mailserver set up that way.  Mine is the same way.  I'm a sendmail guy, not a postfix guy, but notice what happens when I walk through the handshake when sending mail.  In this case I'm logged on to my mailserver (hope.billoblog.com) and am sending mail.  What does my mailserver do?  It talks to itself -- as localhost!

See below:

/usr/lib/sendmail -v oliver at billoblog.com < /dev/null
oliver at billoblog.com... Connecting to [127.0.0.1] via relay...
220 hope.billoblog.com ESMTP Sendmail 8.14.4/8.14.4; Thu, 29 Aug 2013
16:31:50 -0500
>>> EHLO hope.billoblog.com
250-hope.billoblog.com Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
250-STARTTLS
250-DELIVERBY
250 HELP
>>> STARTTLS
220 2.0.0 Ready to start TLS
>>> EHLO hope.billoblog.com
250-hope.billoblog.com Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
250-DELIVERBY
250 HELP
>>> MAIL From:<vendor at hope.billoblog.com> AUTH=vendor at hope.billoblog.com
250 2.1.0 <vendor at hope.billoblog.com>... Sender ok
>>> RCPT To:<oliver at hope.billoblog.com>
>>> DATA
250 2.1.5 <oliver at hope.billoblog.com>... Recipient ok
354 Enter mail, end with "." on a line by itself
>>> .
250 2.0.0 r7TLVont002782 Message accepted for delivery
oliver at billoblog.com... Sent (r7TLVont002782 Message accepted for
delivery)
Closing connection to [127.0.0.1]
>>> QUIT
221 2.0.0 hope.billoblog.com closing connection


For me as a sendmail user, the reason it does this (as far as I can tell) is that localhost appears before hope.billoblog.com in the file /etc/access.  My /etc/access file looks like:

Connect:localhost.localdomain           RELAY 
Connect:localhost                       RELAY 
Connect:127.0.0.1                       RELAY 
Connect:billoblog.com                   RELAY

If I change that to:

Connect:localhost.localdomain           DISCARD
Connect:localhost                       DISCARD
Connect:127.0.0.1                       DISCARD
Connect:billoblog.com                   RELAY


Then my handshake looks like this.  Note that localhost has dropped from
the picture.

/usr/lib/sendmail -v oliver at billoblog.com < /dev/null
oliver at billoblog.com... Connecting to [127.0.0.1] via relay...
220 hope.billoblog.com ESMTP Sendmail 8.14.4/8.14.4; Thu, 29 Aug 2013
16:49:06 -0500
>>> EHLO hope.billoblog.com
250-hope.billoblog.com Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
250-STARTTLS
250-DELIVERBY
250 HELP
>>> STARTTLS
220 2.0.0 Ready to start TLS
>>> EHLO hope.billoblog.com
250-hope.billoblog.com Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
250-DELIVERBY
250 HELP
>>> MAIL From:<oliver at hope.billoblog.com> AUTH=oliver at hope.billoblog.com
250 2.1.0 <oliver at hope.billoblog.com>... Sender ok
>>> RCPT To:<oliver at hope.billoblog.com>
>>> DATA
250 2.1.5 <oliver at hope.billoblog.com>... Recipient ok
354 Enter mail, end with "." on a line by itself
>>> .
250 2.0.0 r7TLn6q4002959 Message accepted for delivery
oliver at billoblog.com... Sent (r7TLn6q4002959 Message accepted for
delivery)
Closing connection to [127.0.0.1]
>>> QUIT
221 2.0.0 hope.billoblog.com closing connection