[Mimedefang] Re: Filtering idea for stock pump&dumps

Kevin A. McGrail kmcgrail at pccc.com
Tue Jul 3 13:02:38 EDT 2007


> That means that if Exchange replies with a 2xx code after DATA, it
> accepts responsibility for "retrying delivery some reasonable number
> of times at intervals as specified in section 4.5.4." in the face of
> transient conditions.  That means that you can't weasel out all that
> easily.
>
> (I suppose if the original message is submitted via a non-SMTP protocol,
> Microsoft *could* technically wiggle out of this one, but that's really
> hair-splitting.)

I don't believe things are getting to the DATA phase.  This greylisting is 
happening at the RCPT phase and (en)forcing a reset (which is probably 
correct).  However, as stated, the 4yz does not require a retry as 
previously mentioned.  I believe it may be considered binary during the RCPT 
phase where 2.0.0 is ok but anything else is a failure, sigh.

63.216.184.10   [08C0] 11:04:46 <<< MAIL From:<kmcgrail at pccc.com> SIZE=5553
63.216.184.10   [08C0] 11:04:49 >>> 250 2.1.0 <kmcgrail at pccc.com>... Sender 
ok
63.216.184.10   [08C0] 11:04:49 <<< RCPT To:<abaucom at removed-domain.com>
63.216.184.10   [08C0] 11:04:50 >>> 451 4.7.1 Server busy, try again later
63.216.184.10   [08C0] 11:04:50 <<< DATA
63.216.184.10   [08C0] 11:04:50 >>> 503 5.5.1 Incorrect command sequence
63.216.184.10   [08C0] 11:04:50 <<< RSET
63.216.184.10   [08C0] 11:04:50 >>> 250 2.0.0 Reset state
63.216.184.10   [0694] 11:04:50 Connected

Regards,
KAM 




More information about the MIMEDefang mailing list