Print Page | Close Window

Some mails accepted, but do not forward?

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=119
Printed Date: 27 December 2024 at 4:16am


Topic: Some mails accepted, but do not forward?
Posted By: Guests
Subject: Some mails accepted, but do not forward?
Date Posted: 31 March 2003 at 12:00am

I find these kind of responses in activity log.

03/31/03 14:25:19:236 -- (208) Connection from: 205.188.157.41 - Originating country : United States 03/31/03 14:25:19:357 -- (208) Resolving 205.188.157.41 - imo-d09.mx.aol.com 03/31/03 14:25:19:357 -- (208) Mail from: someone@aol.com 03/31/03 14:25:19:357 -- (208) - MAPS search done... . 03/31/03 14:25:19:357 -- (208) RCPT TO: someone@mydomain.com accepted 03/31/03 14:25:20:168 -- (208) Disconnect

It then doesn't forward to our email server. Is this just a sending error from there domain?


Replies:
Posted By: LogSat
Date Posted: 31 March 2003 at 12:00am

Hi Brian,

What you are referring to is caused by very, vey poor (and incompetent) choices made by AOL.

What AOL is doing is that it scans for SMTP servers. It then proceeds to connect to them, and then tries to send an email to a third party. If successful, then the SMTP server is an open relay (a bad thing). The problem is that AOL is not following this all the way to actually sending an email. They stop short and just check to see if the recipient (the RCPT TO) command is accepted. If it is accepted, they *ASSUME* that an attempt to then send the email will succeed. This is very very wrong, as SpamFilter and other mail servers will accept the recipients, but will refuse to deliver the mail.

Proper relay testers (as are most MAPS relay tester) know what they're doing and perform this sequence of test correctly. AOL does not, and thinks that perfectly working servers are open relays.

Roberto Franceschetti LogSat Software

Posted By: Guests
Date Posted: 31 March 2003 at 12:00am

Guess it's more than AOL?

03/31/03 19:36:31:035 -- (79) Connection from: 65.54.169.84 - Originating country : United States 03/31/03 19:36:31:396 -- (79) Resolving 65.54.169.84 - bay3-dav54.bay3.hotmail.com 03/31/03 19:36:31:396 -- (79) Mail from: junetpena@msn.com 03/31/03 19:36:33:989 -- (79) - MAPS search done... . 03/31/03 19:36:33:989 -- (79) RCPT TO: user@mydomain.com accepted 03/31/03 19:36:35:732 -- (79) Disconnect

It is going to an actual user on our domain, but then it doesn't forward to mail server. Just ends with the disconnect message?

Posted By: LogSat
Date Posted: 31 March 2003 at 12:00am

Actually this does not look like AOL. Are you running the latest build .80? SpamFilter outputs an entry in the log every time it disconnects someone (builds prior to .80 did not under all circumstances). I don't see an entry here, so it looks like the remote server disconnected before sending anything.

Roberto


Print Page | Close Window