Re: Strange aaazzzaaazzz junks

From: Wietse Venema (no email)
Date: Wed Sep 01 2004 - 11:46:25 EDT


Xin LI:
-- Start of PGP signed section.
> Hi everyone,
>
> I have noticed that two of postfix+mailman deployments (one is FreeBSD.org
> and another is postifix.org) sends something like "aaazzzaaazzzaaazzz" when
> it is sending ordinary mails.

postfix.org is majordomo based, not mailman.

> As far as I can tell (and with kind help of FreeBSD.org's postmaster):
> o The mail is actually logged by postfix.
> o Most times it contains no header information, and just some
> aaazzz's.
> o Sometimes, the outgoing mail even does not conform RFC2821,
> for example, no "EHLO" or "RCPT" is sent before it is sending
> data

You may have a bad NAT or bandwidth manager or other active
component that mixes up data streams.

        Wietse

> o The remote (say, the server sending aaazzz's) is dealing
> with bounces correctly. With a strict RFC2821 check on
> my mail server, these mail will finally bounced and my
> subscription is being disabled due to this issue.
>
> I have noticed this phenomena about one year ago and I used to consider
> this a FreeBSD.org specific issue. However, unfortunatelly, I found that
> there are some logs saying that postfix.org is sending these today.
>
> If this is a common issue, I think it would be valuable to investigate
> more deeply.
>
> Some of my logs is as follows:
>
> Sep 1 22:25:52 beastie postfix/smtpd[497]: warning: Unable to look up NS host dnsauth3.sys.gtei.net for Helo command english-breakfast.cloud9.net: Host not found
> Sep 1 22:25:52 beastie postfix/smtpd[497]: 01265130E45: client=english-breakfast.cloud9.net[168.100.1.9]
> Sep 1 22:25:52 beastie postfix/cleanup[486]: 01265130E45: message-id=<>
> Sep 1 22:25:52 beastie postfix/cleanup[486]: 01265130E45: discard: body aaazzzaaazzzaaazzzaaazzzaaazzz from english-breakfast.cloud9.net[168.100.1.9]; from=<> to=<> proto=ESMTP helo=<english-breakfast.cloud9.net>: "aaazzz Junk"
> Sep 1 22:29:05 beastie postfix/smtpd[497]: disconnect from english-breakfast.cloud9.net[168.100.1.9]
>
> My own server is runninng postfix 2.1.4 with TLS configuration. My
> time zone is GMT+08:00.
>
> The problem is really strange, but as I stated at the beginning of this
> letter, this is more likely a postfix issue rather than a mailman issue,
> as it seems that the remote client is actually dealing with bounces.
>
> If there is anything I did not described clearly, please let me know.
> Additional information is available upon request.
>
> Thanks in advance!
>
> Cheers,
> --
> Xin LI <delphij frontfree net> http://www.delphij.net/
> See complete headers for GPG key and other information.
>
-- End of PGP section.








Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD