postfix-users September 2010 archive
Main Archive Page > Month Archives  > postfix-users archives
postfix-users: Re: postscreen vs. (all?|some?) address verificat

Re: postscreen vs. (all?|some?) address verification milter(s) in sendmail

From: Ralf Hildebrandt <Ralf.Hildebrandt_at_nospam>
Date: Thu Sep 30 2010 - 18:02:29 GMT
To: postfix-users@postfix.org

* Victor Duchovni <Victor.Duchovni@morganstanley.com>:

> Do you have a tcpdump capture? From the above it sounds like HELO is
> sent before the 220 banner. That's a protocol error.

No tcpdump, but I have this:
Sep 30 15:23:53 mail postfix/postscreen[21955]: CONNECT from 192.109.31.12
Sep 30 15:23:53 mail postfix/postscreen[21955]: PREGREET 27 after 0.01 from 192.109.31.12: HELO mail.embl-hamburg.de??
Sep 30 15:23:53 mail postfix/postscreen[21955]: NOQUEUE: reject: RCPT from [192.109.31.12]: 550 5.5.1 Protocol error; from=<>,
to=<valid.recipient@charite.de>, proto=SMTP, helo=<mail.embl-hamburg.de>
Sep 30 15:23:53 mail postfix/postscreen[21955]: NOQUEUE: reject: RCPT from [192.109.31.12]: 550 5.5.1 Protocol error;
from=<postmaster@embl-hamburg.de>, to=<valid.recipient@charite.de>, proto=SMTP, helo=<mail.embl-hamburg.de>
Sep 30 15:23:53 mail postfix/postscreen[21955]: DISCONNECT 192.109.31.12
Sep 30 15:53:56 mail postfix/postscreen[10531]: CONNECT from 192.109.31.12
Sep 30 15:53:56 mail postfix/postscreen[10531]: WHITELISTED 192.109.31.12
Sep 30 15:53:56 mail postfix/postscreen[10531]: PASS OLD 192.109.31.12
Sep 30 15:53:56 mail postfix/smtpd[10563]: connect from mail.EMBL-Hamburg.DE[192.109.31.12]
Sep 30 15:53:56 mail postfix/smtpd[10563]: NOQUEUE: client=mail.EMBL-Hamburg.DE[192.109.31.12]
Sep 30 15:53:56 mail postfix/smtpd[10563]: disconnect from mail.EMBL-Hamburg.DE[192.109.31.12]

which seems to back our both assumptions.

-- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt_at_charite.de | http://www.charite.de