On 2010-11-25, Wietse Venema wrote:
> Looks like Microsoft has "bluewashed" the Frontbridge software
> after acquiring that company (i.e. they replaced the alien code
> by their own). Bluewashing is the word at IBM for this process.

We have reported this bug to Microsoft through our clients who are also
paid users of these services.

> You can safely whitelist the entire 66.55 Microsoft address block:
> 
> /etc/postfix/main.cf:
>     smtpd_discard_ehlo_keyword_address_maps = cidr:/etc/postfix/helo_fixes
> 
> /etc/postfix/helo_fixes
>     65.55.0.0/16 silent-discard pipelining
> 
> I can add a workaround to Postfix code, just like I did for a
> widespread and persistent CISCO PIX bug, but it will take years
> before it reaches wide deployment, because Postfix does not have
> a tradition of frequent forced upgrades to the latest release.

Thanks for that. If you do implement a workaround we will deploy it to
our postfix installations.

In the short term, we will have to deploy a fix to stop this causing
issues, so we'll whitelist the microsoft ranges and the known
frontbridge ips. Hopefully this will be a shortterm problem and we will
get a quick response from microsoft for this bug. ;-)

-- 
Regards,
Stephen Thorne
Development Engineer
Netbox Blue

Reply via email to