spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Michael Scheidell <michael.scheid...@secnap.com>
Subject solved: Re: broken emails from techtarget/crn mag? omeda communications?
Date Mon, 25 Jul 2011 23:57:21 GMT
On 7/22/11 12:49 PM, Michael Scheidell wrote:
> On 7/22/11 12:08 PM, Michael Scheidell wrote:
>> On 7/22/11 12:04 PM, Bret Miller wrote:
>>> Well, I don't actually subscribe to any active techtarget lists, but 
>>> I do still get marketing garbage from them. Got one on the 19th that 
>>> looked fine here.
>>>
> packet captures SEEMS to indicate its them: note the two 'data' 
> statements?
>
i have been in contact with marketing vendor. they confirm that they did 
have a new MTA build on the night of 6/15.
I suspect they are 'pipelining' and not waiting a valid multi-line banner.
this might only affect you if you use multiline banners:

220-Hey, this is a phoney banner, don't spam me
220 Email Ready ESMTP

or use postfix/postscreen with pregreet (phoney 220- banner)
notice the dash in first one?  mta is NOT supposed to start blasting 
email yet!
> EHLO mail.officer.com
> MAIL FROM:<Ofcr@mail.officer.com>
> RCPT TO:<user@domain.com>
> DATA
> DATA
> DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; 
> t=1311353125; d=mail.officer.com; s=dkim; 
> h=date:message-id:from:to:subject:mime-version:content-type:list-unsubscribe; 
> bh=R0ioSboUdz708ua7iQOcmgvGuTJIMNcLAX0/xUjmq+I=; 
> b=e1N+skXWqY6NGf4Gt9fcbv0nvTffPzktcT6qMG29/XsGFqk4/1MfJdK3C+5IN21C4lwcsliNEzsX+F5yUBzt8kV7j/MhuVxpDSST3XyIQbXsZrs6uuRJ7iGg2A0oqGIUwI+XRVxIjevUqArvxg1V4HLlQyRgWI1wNTw/4nYJQdo=;

>
>
>
>


-- 
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
 >*| *SECNAP Network Security Corporation

    * Best Mobile Solutions Product of 2011
    * Best Intrusion Prevention Product
    * Hot Company Finalist 2011
    * Best Email Security Product
    * Certified SNORT Integrator

______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________  

Mime
View raw message