Bad HELO - Host impersonating domain name when http://hostname/roundcube/

zEitEr

Super Moderator
Joined
Apr 11, 2005
Messages
15,143
Location
GMT +7.00
Hello,


That was noticed that webmails uses: localhost:587 as an address to connect to SMTP server. And when we work with http://domain.com/roundcube/ and http://hostname/roundcube/ we get an error:


Code:
2014-11-30 08:38:32 H=localhost (hostname) [::1] rejected EHLO or HELO hostname: Bad HELO - Host impersonating hostname [hostname]
2014-11-30 08:38:32 H=localhost (hostname) [::1] rejected EHLO or HELO hostname: Bad HELO - Host impersonating hostname [hostname]


The exim.conf does not differentiate on what port is a connection made to: 25 or 587. And it does not differentiate whether or not a connection is made from an authenticated user. As a temporary solution we changed


Code:
$config['smtp_server'] = ''localhost';


to


Code:
$config['smtp_server'] = '%n';


in roundcube config.


and


Code:
$smtpServerAddress = 'localhost';


to


Code:
$smtpServerAddress = $_SERVER['SERVER_NAME'];


for Squirrelmail.


Is there any better solution?


Code:
# SpamBlockerTechnology* powered exim.conf, Version 4.3.0, 
# alpha-3
# September 9, 2014 03:03 (-0700)
 
Alex,

I'm not checking my logs. But I continue to use https://host.EXAMPLE.COM/roundcube without problem on my servers. I'm using a customized version of my own SpamBlocker version 4.2.3 release, though, not the CustomBuild version.

So first I say:

Has anyone else had the problem? If so please reply.

Jeff
 
Jeff,


I checked the case in logs as I could not send emails from roundcube without an error. Yes, I wonder is there anybody else who faces the same issue?
 
Almost a week, Alex, and no response as of yet. Have you found the problem? Are you actually seeing an error in your browser? Or just in your logs?

Jeff
 
No, details. Other servers do not have the issue. Very strange. I'll post more details if I have the same situation on any other server.
 
I just had a thught; only a stab in the ark, but make sure you've got the same hostname everywhere, including in exim.conf and if it exiss, in configuration of any webmail clients.

Jeff
 
zEiTEr: Just an idea, because on my servers http://www.domain.com/roundcube is working fine too, without me having to set a hostname in exim.conf or spamblocker as far as I know of.
2014-11-30 08:38:32 H=localhost (hostname) [::1] rejected
Could it be a ipv6 issue? Since I've seen that ::1 before in the /etc/hosts file when using ipv6. I removed that setting and only have "127.0.0.1 localhost" as localhost in my /etc/hosts file.
I've got ipv6 disabled on all servers. Maybe port 587 is blocked in the firewall on ipv6 or something like that?
 
Hello,

I just got the same issue this morning after I updated my server to the lasted exim/exim_conf ... I have applied the fix in the zEitEr's post and everything started working proprely again...
 
I have on several servers as well the emergence of this bug with roundcube, fixed from the first post helped to solve the problem.
 
Back
Top