Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

my host says thunderbird outgoing email is presenting itself in the HELO as spam

  • 31 replies
  • 1 has this problem
  • 1 view
  • Last reply by garry

more options

Below is what Hostmonster told me was wrong with Thunderbird sending mail through thier service: I don't know what the ehlo-helo value should be .

This is a link they sent on how to change it in TB but I don't know exactly what to change what to what:

blog.plee.me/2014/11/mozilla-thunderbird-changing-the-ehlo-helo-value-in-the-received-header-for-outgoing-mail



Hostmonster answer to TB problem sending out mail thru them----------------------------------------------

It's an issue with how thunderbird is presenting itself in the HELO

It's using a method that spammers typically use, by claiming to be a localhost user when it isn't

In the information it is giving, it is claiming to be a localhost user, or coming from 127.0.0.1, when it is not a part of our server at bluehost

The ehlo-helo value needs to be fixed.

This guide may help: blog.plee.me/2014/11/mozilla-thunderbird-changing-the-ehlo-helo-value-in-the-received-header-for-outgoing-mail

Thank you,

HostMonster Support

Here is my current TB settings. Some are for Hostclear which I am currently trying to switch to.


 Application Basics
   Name: Thunderbird
   Version: 45.3.0
   User Agent: Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101 Thunderbird/45.3.0
   Profile Folder: Show Folder
             (Local drive)
   Application Build ID: 20160825102941
   Enabled Plugins: about:plugins
   Build Configuration: about:buildconfig
   Memory Use: about:memory
 Mail and News Accounts
   account1:
     INCOMING: account1, , (none) Local Folders, plain, passwordCleartext
   account4:
     INCOMING: account4, , (pop3) pop.csi.com:110, plain, passwordCleartext
     OUTGOING: , smtp.csi.com:25, alwaysSTARTTLS, passwordCleartext, true
   account5:
     INCOMING: account5, , (imap) h1.hostclear.com:993, SSL, passwordCleartext
     OUTGOING: , h1.hostclear.com:465, SSL, passwordCleartext, true
   account7:
     INCOMING: account7, , (imap) h1.hostclear.com:993, SSL, passwordCleartext
     OUTGOING: , h1.hostclear.com:465, SSL, passwordCleartext, true
   account12:
     INCOMING: account12, , (imap) h1.hostclear.com:993, SSL, passwordCleartext
     OUTGOING: , mail.ntp-led-driver.com:587, alwaysSTARTTLS, passwordCleartext, true
   account13:
     INCOMING: account13, , (imap) host120.hostmonster.com:143, alwaysSTARTTLS, passwordCleartext
     OUTGOING: , host120.hostmonster.com:26, alwaysSTARTTLS, passwordCleartext, true
 Crash Reports
   http://crash-stats.mozilla.com/report/index/bp-55624f69-402e-4612-8959-856b12160320 (3/20/2016)
   http://crash-stats.mozilla.com/report/index/bp-f32cb41a-7736-4db9-807a-54d332150308 (3/8/2015)
 Extensions
   AttachExtraTools, 1.7.1, true, attachextratools@kaosmos.nnp
   Remove Duplicate Messages, 0.1.14, true, {12345678-1234-1234-1234-123456789abc}
   AttachmentExtractor, 1.3.5.1, false, {35834d20-efdb-4f78-ab77-9635fb4e56c4}
 Important Modified Preferences
   Name: Value
     browser.cache.disk.capacity: 262144
     browser.cache.disk.filesystem_reported: 1
     browser.cache.disk.smart_size_cached_value: 358400
     browser.cache.disk.smart_size.first_run: false
     browser.cache.disk.smart_size.use_old_max: false
     browser.display.use_system_colors: true
     dom.apps.reset-permissions: true
     dom.max_chrome_script_run_time: 0
     extensions.lastAppVersion: 45.3.0
     font.size.variable.x-western: 14
     gfx.crash-guard.glcontext.appVersion: 45.3.0
     gfx.crash-guard.glcontext.deviceID: 0x06e4
     gfx.crash-guard.glcontext.driverVersion: 6.14.13.1407
     gfx.crash-guard.glcontext.gfx.driver-init.direct3d11-angle: true
     gfx.crash-guard.glcontext.gfx.driver-init.webgl-angle: true
     gfx.crash-guard.glcontext.gfx.driver-init.webgl-angle-force-d3d11: false
     gfx.crash-guard.glcontext.gfx.driver-init.webgl-angle-force-warp: false
     gfx.crash-guard.glcontext.gfx.driver-init.webgl-angle-try-d3d11: true
     gfx.crash-guard.status.glcontext: 2
     mail.openMessageBehavior.version: 1
     mailnews.database.global.datastore.id: c8d81253-a412-493c-824d-689df0fc24b
     network.cookie.prefsMigrated: true
     network.predictor.cleaned-up: true
     places.database.lastMaintenance: 1474484291
     places.history.expiration.transient_current_max_pages: 87201
     plugin.importedState: true
 Graphics
     Adapter Description: NVIDIA GeForce 8400 GS
     Vendor ID: 0x10de
     Device ID: 0x06e4
     Adapter RAM: Unknown
     Adapter Drivers: nv4_disp
     Driver Version: 6.14.13.1407
     Driver Date: 2-9-2013
     WebGL Renderer: Google Inc. -- ANGLE (NVIDIA GeForce 8400 GS     Direct3D9 vs_3_0 ps_3_0) -- OpenGL ES 2.0 (ANGLE 2.1.0.316930d51ea9)
     GPU Accelerated Windows: 0
     AzureCanvasBackend: skia
     AzureSkiaAccelerated: 0
     AzureFallbackCanvasBackend: cairo
     AzureContentBackend: cairo
 JavaScript
 Incremental GC: 1
 Accessibility
   Activated: 0
   Prevent Accessibility: 0
 Library Versions
     Expected minimum version
     Version in use
     NSPR
     4.12
     4.12
     NSS
     3.21.1 Basic ECC
     3.21.1 Basic ECC
     NSS Util
     3.21.1
     3.21.1
     NSS SSL
     3.21.1 Basic ECC
     3.21.1 Basic ECC
     NSS S/MIME
     3.21.1 Basic ECC
     3.21.1 Basic ECC

Below is what Hostmonster told me was wrong with Thunderbird sending mail through thier service: I don't know what the ehlo-helo value should be . This is a link they sent on how to change it in TB but I don't know exactly what to change what to what: blog.plee.me/2014/11/mozilla-thunderbird-changing-the-ehlo-helo-value-in-the-received-header-for-outgoing-mail ---------------------------Hostmonster answer to TB problem sending out mail thru them---------------------------------------------- It's an issue with how thunderbird is presenting itself in the HELO It's using a method that spammers typically use, by claiming to be a localhost user when it isn't In the information it is giving, it is claiming to be a localhost user, or coming from 127.0.0.1, when it is not a part of our server at bluehost The ehlo-helo value needs to be fixed. This guide may help: blog.plee.me/2014/11/mozilla-thunderbird-changing-the-ehlo-helo-value-in-the-received-header-for-outgoing-mail Thank you, HostMonster Support Here is my current TB settings. Some are for Hostclear which I am currently trying to switch to. Application Basics Name: Thunderbird Version: 45.3.0 User Agent: Mozilla/5.0 (Windows NT 5.1; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 Profile Folder: Show Folder (Local drive) Application Build ID: 20160825102941 Enabled Plugins: about:plugins Build Configuration: about:buildconfig Memory Use: about:memory Mail and News Accounts account1: INCOMING: account1, , (none) Local Folders, plain, passwordCleartext account4: INCOMING: account4, , (pop3) pop.csi.com:110, plain, passwordCleartext OUTGOING: , smtp.csi.com:25, alwaysSTARTTLS, passwordCleartext, true account5: INCOMING: account5, , (imap) h1.hostclear.com:993, SSL, passwordCleartext OUTGOING: , h1.hostclear.com:465, SSL, passwordCleartext, true account7: INCOMING: account7, , (imap) h1.hostclear.com:993, SSL, passwordCleartext OUTGOING: , h1.hostclear.com:465, SSL, passwordCleartext, true account12: INCOMING: account12, , (imap) h1.hostclear.com:993, SSL, passwordCleartext OUTGOING: , mail.ntp-led-driver.com:587, alwaysSTARTTLS, passwordCleartext, true account13: INCOMING: account13, , (imap) host120.hostmonster.com:143, alwaysSTARTTLS, passwordCleartext OUTGOING: , host120.hostmonster.com:26, alwaysSTARTTLS, passwordCleartext, true Crash Reports http://crash-stats.mozilla.com/report/index/bp-55624f69-402e-4612-8959-856b12160320 (3/20/2016) http://crash-stats.mozilla.com/report/index/bp-f32cb41a-7736-4db9-807a-54d332150308 (3/8/2015) Extensions AttachExtraTools, 1.7.1, true, attachextratools@kaosmos.nnp Remove Duplicate Messages, 0.1.14, true, {12345678-1234-1234-1234-123456789abc} AttachmentExtractor, 1.3.5.1, false, {35834d20-efdb-4f78-ab77-9635fb4e56c4} Important Modified Preferences Name: Value browser.cache.disk.capacity: 262144 browser.cache.disk.filesystem_reported: 1 browser.cache.disk.smart_size_cached_value: 358400 browser.cache.disk.smart_size.first_run: false browser.cache.disk.smart_size.use_old_max: false browser.display.use_system_colors: true dom.apps.reset-permissions: true dom.max_chrome_script_run_time: 0 extensions.lastAppVersion: 45.3.0 font.size.variable.x-western: 14 gfx.crash-guard.glcontext.appVersion: 45.3.0 gfx.crash-guard.glcontext.deviceID: 0x06e4 gfx.crash-guard.glcontext.driverVersion: 6.14.13.1407 gfx.crash-guard.glcontext.gfx.driver-init.direct3d11-angle: true gfx.crash-guard.glcontext.gfx.driver-init.webgl-angle: true gfx.crash-guard.glcontext.gfx.driver-init.webgl-angle-force-d3d11: false gfx.crash-guard.glcontext.gfx.driver-init.webgl-angle-force-warp: false gfx.crash-guard.glcontext.gfx.driver-init.webgl-angle-try-d3d11: true gfx.crash-guard.status.glcontext: 2 mail.openMessageBehavior.version: 1 mailnews.database.global.datastore.id: c8d81253-a412-493c-824d-689df0fc24b network.cookie.prefsMigrated: true network.predictor.cleaned-up: true places.database.lastMaintenance: 1474484291 places.history.expiration.transient_current_max_pages: 87201 plugin.importedState: true Graphics Adapter Description: NVIDIA GeForce 8400 GS Vendor ID: 0x10de Device ID: 0x06e4 Adapter RAM: Unknown Adapter Drivers: nv4_disp Driver Version: 6.14.13.1407 Driver Date: 2-9-2013 WebGL Renderer: Google Inc. -- ANGLE (NVIDIA GeForce 8400 GS Direct3D9 vs_3_0 ps_3_0) -- OpenGL ES 2.0 (ANGLE 2.1.0.316930d51ea9) GPU Accelerated Windows: 0 AzureCanvasBackend: skia AzureSkiaAccelerated: 0 AzureFallbackCanvasBackend: cairo AzureContentBackend: cairo JavaScript Incremental GC: 1 Accessibility Activated: 0 Prevent Accessibility: 0 Library Versions Expected minimum version Version in use NSPR 4.12 4.12 NSS 3.21.1 Basic ECC 3.21.1 Basic ECC NSS Util 3.21.1 3.21.1 NSS SSL 3.21.1 Basic ECC 3.21.1 Basic ECC NSS S/MIME 3.21.1 Basic ECC 3.21.1 Basic ECC -------------------------------------------------------------------------------------------------------------------------------------------------------------------

All Replies (11)

more options

Let me guess.

At one moment a few weeks ago someone suggested that I transfer my domain name to a 3rd party host and then reconstruct my site and email etc.

I am guessing something is trying to acquire my domain name and will do whatever it needs to keep me in the dark.

This is only a guess.

I still have no response to this problem.

more options

Send me a message via Opera.

xenos at gmx dot co dot uk

more options

I'll send you a message from Opera to: xenos@gmx.co.uk

more options

Garry has sent me a message using Opera. It omits the machine's local address. It appears as if sent using his public IP address, as issued by his ISP.

All the messages I have here that I have looked at and were sent by Thunderbird include the machine's local address, usually some variant of 192.168.0.0/16

None of the ISPs or SMTP servers I can test with have objected to this. So far, I have demonstrated that bt.com, gmx.com and Microsoft's SMTP server are all quite happy with a local private LAN address as the message's origin.

Hostclear are clearly out of line here. Maybe they expect all their clients to use webmail exclusively. ;-)

Modified by Zenos

more options

Hostclear support the use of imap email clients but they do not go further than supporting email if the webmail client they provide such as roundcube work.

If I send mail directly from their webmail client it works of course.

Hostclear doesn't care about the problem if their webmail clients work.

I still don't know how to get Thunderbird to work with hostclear.

Since hostmonster had the same problem I assume all of the related companies have the same problem. Is there no more people with this problem?

I seems to have started around the end of August.

more options

It seems clear to me now that if I could have thunderbird omit my machines ip address then I should be able to send mail thru my hosted email accounts.

How do I stop Thunderbird from sending out my machine ip address?

I don't have any experience in this so I will need step by step instructions.

more options

Your initial post contains a link to a site with step by step instructions.

more options

Yes but I don't understand what they are trying to say.

I can get the config file open but don't know what to change.

There are dozens of IP addresses.

more options

Is there a way to send a copy so you can see?

more options

Dang! I wrote out a reply and I don't know where it's gone.

Maybe I'll try again later…

more options

Did you find what you were going to send?

  1. 1
  2. 2