Le 26/07/2011 01:57, Michael Scheidell a écrit : > On 7/22/11 12:49 PM, Michael Scheidell wrote: >> On 7/22/11 12:08 PM, Michael Scheidell wrote: >>> On 7/22/11 12:04 PM, Bret Miller wrote: >>>> Well, I don't actually subscribe to any active techtarget lists, but >>>> I do still get marketing garbage from them. Got one on the 19th that >>>> looked fine here. >>>> >> packet captures SEEMS to indicate its them: note the two 'data' >> statements? >> > i have been in contact with marketing vendor. they confirm that they did > have a new MTA build on the night of 6/15. > I suspect they are 'pipelining' and not waiting a valid multi-line banner. > this might only affect you if you use multiline banners:
No multi-line banner here. yet, the borked stuff from techtarget... and as I said in my other post, this has nothing to do with a "new MTA ... 6/15". they've been sending borked mail since a lot longer... > > 220-Hey, this is a phoney banner, don't spam me > 220 Email Ready ESMTP > > or use postfix/postscreen with pregreet (phoney 220- banner) > notice the dash in first one? mta is NOT supposed to start blasting > email yet! >> EHLO mail.officer.com >> MAIL FROM:<o...@mail.officer.com> >> RCPT TO:<u...@domain.com> >> DATA >> DATA >> DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; >> t=1311353125; d=mail.officer.com; s=dkim; >> h=date:message-id:from:to:subject:mime-version:content-type:list-unsubscribe; >> bh=R0ioSboUdz708ua7iQOcmgvGuTJIMNcLAX0/xUjmq+I=; >> b=e1N+skXWqY6NGf4Gt9fcbv0nvTffPzktcT6qMG29/XsGFqk4/1MfJdK3C+5IN21C4lwcsliNEzsX+F5yUBzt8kV7j/MhuVxpDSST3XyIQbXsZrs6uuRJ7iGg2A0oqGIUwI+XRVxIjevUqArvxg1V4HLlQyRgWI1wNTw/4nYJQdo=; >> >> >> >> > >