On 7/22/11 12:49 PM, Michael Scheidell wrote:
On 7/22/11 12:08 PM, Michael Scheidell wrote:
On 7/22/11 12:04 PM, Bret Miller wrote:
Well, I don't actually subscribe to any active techtarget lists, but
I do still get marketing garbage from them. Got one on the 19th that
looked fine here.
packet captures SEEMS to indicate its them: note the two 'data'
statements?
i have been in contact with marketing vendor. they confirm that they did
have a new MTA build on the night of 6/15.
I suspect they are 'pipelining' and not waiting a valid multi-line banner.
this might only affect you if you use multiline banners:
220-Hey, this is a phoney banner, don't spam me
220 Email Ready ESMTP
or use postfix/postscreen with pregreet (phoney 220- banner)
notice the dash in first one? mta is NOT supposed to start blasting
email yet!
EHLO mail.officer.com
MAIL FROM:<o...@mail.officer.com>
RCPT TO:<u...@domain.com>
DATA
DATA
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
t=1311353125; d=mail.officer.com; s=dkim;
h=date:message-id:from:to:subject:mime-version:content-type:list-unsubscribe;
bh=R0ioSboUdz708ua7iQOcmgvGuTJIMNcLAX0/xUjmq+I=;
b=e1N+skXWqY6NGf4Gt9fcbv0nvTffPzktcT6qMG29/XsGFqk4/1MfJdK3C+5IN21C4lwcsliNEzsX+F5yUBzt8kV7j/MhuVxpDSST3XyIQbXsZrs6uuRJ7iGg2A0oqGIUwI+XRVxIjevUqArvxg1V4HLlQyRgWI1wNTw/4nYJQdo=;
--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
>*| *SECNAP Network Security Corporation
* Best Mobile Solutions Product of 2011
* Best Intrusion Prevention Product
* Hot Company Finalist 2011
* Best Email Security Product
* Certified SNORT Integrator
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
