This memo defines an extension to the SMTP service whereby an
client and server may interact to give the server an opportunity
start the processing of its queues for messages to go to a
host. This extension is meant to be used in startup conditions
well as for mail nodes that have transient connections to
service providers
1.
The TURN command was a valid attempt to address the problem of
to start the processing for the mail queue on a remote machine
However, the TURN command presents a large security loophole.
there is no verification of the remote host name, the TURN
could be used by a rogue system to download the mail for a site
than itself
Therefore, this memo introduces the ETRN command. This command
the mechanism defined in [4] to define extensions to the SMTP
whereby a client ("sender-SMTP") may request that the
("receiver-SMTP") start the processing of its mail queues messages that are waiting at the server for the client machine.
any messages are at the server for the client, then the server
create a new SMTP session and send the messages at that time
To save money, many small companies want to only maintain
connections to their service providers. In addition, there are
situations where the client sites depend on their mail
quickly, so forcing the queues on the server belonging to
service provider may be more desirable than waiting for the
timeout to occur
Both of these situations could currently be fixed using the
command defined in [1], if it were not for a large security
in the TURN command. As it stands, the TURN command will reverse direction of the SMTP connection and assume that the remote host
being honest about what its name is. The security loophole is
there is no documented stipulation for checking the authenticity
the remote host name, as given in the HELO or EHLO command. As such
most SMTP and ESMTP implementations do not implement the TURN
to avoid this security loophole
This has been addressed in the design of the ETRN command. extended turn command was written with the points in the paragraph in mind, yet paying attention to the problems currently exist with the TURN command. The security loophole
avoided by asking the server to start a new connection aimed at specified client
In this manner, the server has a lot more certainty that it
talking to the correct SMTP client. This mechanism can just be
as a more immediate version of the retry queues that appear in
SMTP implementations. In addition, as this command will take
RFC 1985 SMTP Service Extension - ETRN August 1996
single parameter, the name of the remote host(s) to start the
for, the server can decide whether it wishes to respect the
or deny it for any local administrative reasons
4.
Remote queue processing means that using an SMTP or ESMTP connection
the client may request that the server start to process parts of messaging queue. This processing is performed using the
SMTP infrastructure and will occur at some point after the
is initiated
The server host is the node that is responding to the
command
The client host is the node that is initiating the ETRN command
The remote host name is defined to be a plain-text field specifies a name for the remote host(s). This remote host name
also include an alias for the specified remote host or commands to identify other types of queues
The extended ETRN command is issued by the client host when it
to start the SMTP queue processing of a given server host.
syntax of this command is as follows