On Sep 11, 2005, at 11:02 AM, Steve Williams wrote:

Jason Dixon wrote:

I'm using spamd with greylisting on a new Postfix mail proxy, but it's behaving strangely for accepted connections. If I make a connection to the server from my whitelisted (<spamd-white>) external test server, I see the following:

[EMAIL PROTECTED] root]# telnet mail.domain.com 25
Trying x.x.x.x...
Connected to mail.domain.com (x.x.x.x).
Escape character is '^]'.
220 ******************************
EHLO mail.dixongroup.net
502 Error: command not implemented
QUIT
221 Bye
Connection closed by foreign host.

I get this type of "220" banner when I connect to my former work & they had some Cisco email proxy type of hardware... it might have been embedded in the PIX, I'm not 100% sure...

telnet mail.xxxxx.com smtp
220 *****************************200**0**00*2***0*00

Is there some CISCO hardware in the picture??

Yes, there is a PIX (eventually to be replaced with OpenBSD/PF), but I don't understand how that could interfere. If I remove the external system from <spamd-white>, I get redirected to spamd as expected:

[EMAIL PROTECTED] jason]$ telnet mail.domain.com 25
Trying x.x.x.x...
Connected to mail.domain.com (x.x.x.x).
Escape character is '^]'.
220 ******************************************************************0**2** 200*
HELO localhost
250 Hello, spam sender. Pleased to be wasting your time.
QUIT
221 mail.domain.com
Connection closed by foreign host.

I guess it's possible that PIX software might be munging the 220 (unlikely), but I still see the connections in my maillog, so it's not intercepting the SMTP session.

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net

Reply via email to