Petition To Fix Gmail’s Custom From Glitch

by Danny Sullivan on February 24, 2006

in Email

Earlier, I wrote about Gmail’s bogus “Custom From” system that doesn’t hide your Gmail address even if you tell Gmail you want another email address to show. I got an email from someone similarly irked by it, telling me that there’s now a petition to ask Google to fix this. Would I sign? Sure. I’m now signatory number two. If you want to push the numbers up into the double digits, here’s the petition.

  • Google Buzz

  • Share/Bookmark

{ 4 comments… read them below or add one }

1 Richard October 5, 2006 at 1:32 pm

I believe this is down to SPF (http://libspf.org/files/rfc4408.txt). This is an anti spam technology to prevent people sending spoof emails. Basically if your receiving SMTP server is SPF compliant, it will check that the IP address of the sending server against the SPF record in the DNS file for the Host domain specified in the MAIL FROM and (optionally) HELO fields . Thus GMail can only send email purporting to be from GMail.

There are two ways to circumvent this. The first is to add the IP addresses of your SMTP server to GMail’s SPF record. The second is to add a Sender header to your email; this is what GMail does. It is up to the email client (Outlook etc) how it interprets and displays the From and Sender fields.

If you send an email to check-auth@verifier.port25.com you will find that while the email you send has the following headers,
Return-Path: <username@gmail.com>
To: “SPF Test” <check-auth@verifier.port25.com>
From: Me <Me@MyDomain.com>
Sender: Me <username@gmail.com>

the GMail server’s envelope has the following data:
HELO hostname: nf-out-0910.google.com
Source IP: 64.233.182.187
mail-from: username@gmail.com

so the receiving Mail server is going to lookup the SPF record at gmail.com and check that 64.233.182.187 is valid for that domain. It may also check the hostname.

Now if GMail sent the Mail-from as Me@MyDomain.com and I added GMail’s IP addresses to my SPF record by adding mx:gmail.com, then I could hide GMail from everybody, but that requires me to have access to my SPF record, be tech savvy and creates support headaches for GMail.

FYI, it looks to me as though you do not have full access to your DNS record as Tiger Technologies has set up the SPF record as “v=spf1 ip4:64.71.157.128/27 ip4:64.62.142.80/28 ip4:64.62.209.0/24 a ptr ?all” which covers all their servers.

Richard

2 Ed March 9, 2007 at 1:52 pm

I thought I would mention a third option that would also work.
Option 1)
Add your IP address to the Gmail SPF record (not really an option)
Option 2)
From name@gmail.com on behalf of [name@mydomain.com]
Option 3)
Gmail could implement a new feature to allow me to send email using my SMTP server instead of theirs.
Why not? MS Outlook and Thunderbird have options to choose the SMTP server of your choice. There is no reason that Gmail could not also let you send email using the SMTP server of your choice.
Gmail already lets me connect to the POP server of my choice. Why not let me also connect to the SMTP server of my choice?
By allowing users to pick their own POP and SMTP servers Gmail will have built a webtop replacement for the desktop email client.

3 db May 6, 2009 at 3:32 pm

old thread, but using gmail apps gets around this for anyone still trying

4 Anna September 24, 2009 at 4:54 pm

mines glited when i try to look a my Mail it quckliy gose back to inbox! :(

Leave a Comment

Thinking of dropping your link spam? Consider this. Seriously, STOP & READ. The guy who runs Google's spam fighting team? I know him pretty well. In fact, it's sort of a joke between us to see what's the latest absurd link drop I can share. So if you want your site to be a poster child on his idiots wall -- and probably to encounter a Google penalty -- go ahead, drop your link. It's nofollow anyway, plus I do have built-in spam fighting and what gets past that usually gets nabbed in a few minutes to a few hours. So you got to ask yourself. Are you feeling lucky?

You can use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Previous post:

Next post: