[Mimedefang] Re: Filtering idea for stock pump&dumps
Kevin A. McGrail
kmcgrail at pccc.com
Tue Jul 3 13:02:38 EDT 2007
> That means that if Exchange replies with a 2xx code after DATA, it
> accepts responsibility for "retrying delivery some reasonable number
> of times at intervals as specified in section 4.5.4." in the face of
> transient conditions. That means that you can't weasel out all that
> easily.
>
> (I suppose if the original message is submitted via a non-SMTP protocol,
> Microsoft *could* technically wiggle out of this one, but that's really
> hair-splitting.)
I don't believe things are getting to the DATA phase. This greylisting is
happening at the RCPT phase and (en)forcing a reset (which is probably
correct). However, as stated, the 4yz does not require a retry as
previously mentioned. I believe it may be considered binary during the RCPT
phase where 2.0.0 is ok but anything else is a failure, sigh.
63.216.184.10 [08C0] 11:04:46 <<< MAIL From:<kmcgrail at pccc.com> SIZE=5553
63.216.184.10 [08C0] 11:04:49 >>> 250 2.1.0 <kmcgrail at pccc.com>... Sender
ok
63.216.184.10 [08C0] 11:04:49 <<< RCPT To:<abaucom at removed-domain.com>
63.216.184.10 [08C0] 11:04:50 >>> 451 4.7.1 Server busy, try again later
63.216.184.10 [08C0] 11:04:50 <<< DATA
63.216.184.10 [08C0] 11:04:50 >>> 503 5.5.1 Incorrect command sequence
63.216.184.10 [08C0] 11:04:50 <<< RSET
63.216.184.10 [08C0] 11:04:50 >>> 250 2.0.0 Reset state
63.216.184.10 [0694] 11:04:50 Connected
Regards,
KAM
More information about the MIMEDefang
mailing list