|
Roberto,
Today I was looking the logs of my destination SMTP server (Norton AV for Gateways) and saw a lot of "Protocol Violation" like this:
06-Aug-2003 17:00:45 Action: Message Accepted Client: 10.0.0.35 From: marcelo_v_g@yahoo.com.br
To: gcoelho@sulamerica.com.br Subject: Re: Cirurgia Size: 1592
SMTP ID: M2003080617004532302 Connection ID: 16
06-Aug-2003 17:00:45 Action: Protocol Violation Client: 10.0.0.35 Connection ID: 16
Info: Unknown command. Last Command: .
06-Aug-2003 17:00:45 Action: Disconnected Client: 10.0.0.35 Connection ID: 16
10.0.0.35 is Spamfilter. Take a look at the "Last Command:" and you can see a dot (.). It seems that Spamfilter is sending twice the dot trying to end a message. I have logged the conversation between Spamfilter and my destination server and we can see:
> 17:0:45 3 .
< 17:0:45 56 250 M2003080617004532302 Message accepted for delivery
> 17:0:45 3 .
< 17:0:45 41 500 Syntax error, command unrecognized.
> 17:0:45 6 QUIT
< 17:0:45 49 221 navgw.sulamerica.com.br closing connection.
Lines with the ">" are Spamfilter sending commands and with "<" are my destination SMTP server answering. The message is accepted but every message logs this error.
Can you verify this ?
Thanks,
Abel.
|