Strange aaazzzaaazzz junks

From: Xin LI (no email)
Date: Wed Sep 01 2004 - 10:38:49 EDT


Hi everyone,

I have noticed that two of postfix+mailman deployments (one is FreeBSD.org
and another is postifix.org) sends something like "aaazzzaaazzzaaazzz" when
it is sending ordinary mails.

As far as I can tell (and with kind help of FreeBSD.org's postmaster):
        o The mail is actually logged by postfix.
        o Most times it contains no header information, and just some
          aaazzz's.
        o Sometimes, the outgoing mail even does not conform RFC2821,
          for example, no "EHLO" or "RCPT" is sent before it is sending
          data
        o The remote (say, the server sending aaazzz's) is dealing
          with bounces correctly. With a strict RFC2821 check on
          my mail server, these mail will finally bounced and my
          subscription is being disabled due to this issue.

I have noticed this phenomena about one year ago and I used to consider
this a FreeBSD.org specific issue. However, unfortunatelly, I found that
there are some logs saying that postfix.org is sending these today.

If this is a common issue, I think it would be valuable to investigate
more deeply.

Some of my logs is as follows:

Sep 1 22:25:52 beastie postfix/smtpd[497]: warning: Unable to look up NS host dnsauth3.sys.gtei.net for Helo command english-breakfast.cloud9.net: Host not found
Sep 1 22:25:52 beastie postfix/smtpd[497]: 01265130E45: client=english-breakfast.cloud9.net[168.100.1.9]
Sep 1 22:25:52 beastie postfix/cleanup[486]: 01265130E45: message-id=<20>
Sep 1 22:25:52 beastie postfix/cleanup[486]: 01265130E45: discard: body aaazzzaaazzzaaazzzaaazzzaaazzz from english-breakfast.cloud9.net[168.100.1.9]; from=<> to=<> proto=ESMTP helo=<english-breakfast.cloud9.net>: "aaazzz Junk"
Sep 1 22:29:05 beastie postfix/smtpd[497]: disconnect from english-breakfast.cloud9.net[168.100.1.9]

My own server is runninng postfix 2.1.4 with TLS configuration. My
time zone is GMT+08:00.

The problem is really strange, but as I stated at the beginning of this
letter, this is more likely a postfix issue rather than a mailman issue,
as it seems that the remote client is actually dealing with bounces.

If there is anything I did not described clearly, please let me know.
Additional information is available upon request.

Thanks in advance!

Cheers,

-- 
Xin LI <delphij frontfree net>	http://www.delphij.net/
See complete headers for GPG key and other information.









Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD