Guess Ethereal is WireShark, now. I dug through a dump with WS and didn't see 421 coming from the server. Not got mind around WireShark filters, yet.
Yes, that does appear to be the way avast works, by jumping in between. When I telnet to port 25, avast jumps in and sends the EHLO then hangs up. Couldn't see the conversation from telnet, but it was logged by postfix when I turned on peer_debug. I have a trouble ticket with avast, but haven't seen a response. This is painfull, I have a lot of people (~2000) mad at me. OK, maybe just the ones that us avast... Joe > Joseph Conrad: >> Outlook Express error: >> >> An unknown error has occurred. Account: 'pop.rockymountains.net', >> Server: >> 'smtp.rockymountains.net', Protocol: SMTP, Server Response: '421 ', >> Port: >> 587, Secure(SSL): No, Server Error: 421, Error Number: 0x800CCC67 > > You mentioned that AVAST is playing man-in-the-middle between the > mail application and the mail server. > > Like this: Outlook Express <=> AVAST <=> POSTFIX. > > Your logging shows that AVAST hangs up after POSTFIX replies to > EHLO (or was it HELO), so this is evidence that POSTIX did not send > 421. It would be a safe bet that AVAST was doing that instead. > > Wietse >
