[70541] in North American Network Operators' Group
Re: Barracuda Networks Spam Firewall
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Tue May 18 17:01:00 2004
To: Todd Vierling <tv@duh.org>
Cc: "Christopher X. Candreva" <chris@westnet.com>, nanog@merit.edu
In-Reply-To: Your message of "Tue, 18 May 2004 16:13:20 EDT."
<Pine.NEB.4.58.0405181612360.16401@server.duh.org>
From: Valdis.Kletnieks@vt.edu
Date: Tue, 18 May 2004 16:57:56 -0400
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_1358914744P
Content-Type: multipart/mixed ;
boundary="==_Exmh_13260916180"
This is a multipart MIME message.
--==_Exmh_13260916180
Content-Type: text/plain; charset=us-ascii
On Tue, 18 May 2004 16:13:20 EDT, Todd Vierling said:
> On Tue, 18 May 2004 Valdis.Kletnieks@vt.edu wrote:
>
> : Yes, it *would* be nice if everybody in the world was able to DTRT on
> : their outward-facing gateway and send back an immediate 550 on a RCPT TO:
> : in order to stop stuff right up front. However, this implies getting
> : buy-in and resources of all the appropriate people.
>
> Blocking outbound mail from such entities is a pretty good way to get
> buy-in. (Yes, there's a DNSBL in work to enumerate such systems.)
When it gets built, will it list AOL.COM for not rejecting at the original RCPT
TO? Or Hotmail.com? (Consider the following 2 pieces of mail - mail comes in
from someplace with a From: @aol.com, our Listserv tries to process the command
(which was actually spam, but it's hard to tell that until you try to handle
it), and send the response back... notice that AOL didn't 550 my mail, but
accepted and bounced it. Similarly for the hotmail.com mail - the spam comes
in, and they accept-and-bounce our response rather than 550 it (although to be fair, they
usually DO manage to 550 this stuff).
Yes, it's generally a good idea - but not one that everybody can carry out all the time.
You don't like it, take it up with the AOL and Hotmail guys, not me, OK? :)
--==_Exmh_13260916180
Content-Type: message/rfc822 ; name="2473"
Content-Description: 2473
Content-Disposition: attachment; filename="2473"
Received: from zidane.cc.vt.edu (IDENT:mirapoint@zidane.cc.vt.edu [198.82.161.184])
by listserv.vt.edu (8.12.10/8.12.10/LISTSERV) with ESMTP id i4H8vJ1Q138396
for <listserv@listserv.vt.edu>; Mon, 17 May 2004 04:57:19 -0400
Received: from omr-m03.mx.aol.com (omr-m03.mx.aol.com [64.12.138.3])
by zidane.cc.vt.edu (MOS 3.4.6-GR)
with ESMTP id AUF37740;
Mon, 17 May 2004 04:57:18 -0400 (EDT)
Received: from rly-xg05.mx.aol.com (rly-xg05.mail.aol.com [172.20.115.202]) by omr-m03.mx.aol.com (v98.19) with ESMTP id RELAYIN5-640a87e5a54; Mon, 17 May 2004 04:56:58 -0400
Received: from localhost (localhost)
by rly-xg05.mx.aol.com (8.8.8/8.8.8/AOL-5.0.0)
with internal id EAC20083;
Mon, 17 May 2004 04:56:58 -0400 (EDT)
Date: Mon, 17 May 2004 04:56:58 -0400 (EDT)
From: Mail Delivery Subsystem <MAILER-DAEMON@aol.com>
Message-Id: <200405170856.EAC20083@rly-xg05.mx.aol.com>
To: <LISTSERV@LISTSERV.VT.EDU>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="EAC20083.1084784218/rly-xg05.mx.aol.com"
Subject: Returned mail: User unknown
Auto-Submitted: auto-generated (failure)
X-AOL-IP: 172.20.115.202
X-Junkmail-Status: score=0/50, host=zidane.cc.vt.edu
X-notice: Domain aol.com found in postmaster.rfc-ignorant.org
This is a MIME-encapsulated message
--EAC20083.1084784218/rly-xg05.mx.aol.com
The original message was received at Mon, 17 May 2004 04:56:55 -0400 (EDT)
from listserv.vt.edu [198.82.161.192]
*** ATTENTION ***
Your e-mail is being returned to you because there was a problem with its
delivery. The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".
The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".
The line beginning with "<<<" describes the specific reason your e-mail could
not be delivered. The next line contains a second error message which is a
general translation for other e-mail servers.
Please direct further questions regarding this message to your e-mail
administrator.
--AOL Postmaster
----- The following addresses had permanent fatal errors -----
<ssamantra@aol.com>
----- Transcript of session follows -----
... while talking to air-xg01.mail.aol.com.:
>>> RCPT To:<ssamantra@aol.com>
<<< 550 MAILBOX NOT FOUND
550 <ssamantra@aol.com>... User unknown
--EAC20083.1084784218/rly-xg05.mx.aol.com
Content-Type: message/delivery-status
Reporting-MTA: dns; rly-xg05.mx.aol.com
Arrival-Date: Mon, 17 May 2004 04:56:55 -0400 (EDT)
Final-Recipient: RFC822; ssamantra@aol.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; air-xg01.mail.aol.com
Diagnostic-Code: SMTP; 550 MAILBOX NOT FOUND
Last-Attempt-Date: Mon, 17 May 2004 04:56:58 -0400 (EDT)
--EAC20083.1084784218/rly-xg05.mx.aol.com
Content-Type: text/rfc822-headers
Received: from listserv.vt.edu (listserv.vt.edu [198.82.161.192]) by rly-xg05.mx.aol.com (v99_r4.3) with ESMTP id MAILRELAYINXG56-47040a87e5628e; Mon, 17 May 2004 04:56:54 -0400
Received: from listserv.vt.edu (LOCALHOST [127.0.0.1])
by listserv.vt.edu (8.12.10/8.12.10/LISTSERV) with ESMTP id i4H85h43139864
for <ssamantra@AOL.COM>; Mon, 17 May 2004 04:56:54 -0400
Date: Mon, 17 May 2004 04:56:54 -0400
From: "L-Soft list server at LISTSERV.VT.EDU (1.8e)"
<LISTSERV@listserv.vt.edu>
Subject: Re: start making money
To: ssamantra@AOL.COM
Message-ID: <LISTSERV%2004051704565448@LISTSERV.VT.EDU>
X-AOL-IP: 198.82.161.192
X-AOL-SCOLL-SCORE: 0:XXX:XX
X-AOL-SCOLL-URL_COUNT: 0
--EAC20083.1084784218/rly-xg05.mx.aol.com--
--THFXbHeSSadeQHFeNZcaYLZRcadKZb--
--==_Exmh_13260916180
Content-Type: message/rfc822 ; name="14208"
Content-Description: 14208
Content-Disposition: attachment; filename="14208"
Received: from vivi.cc.vt.edu (IDENT:mirapoint@vivi.cc.vt.edu [198.82.161.183])
by listserv.vt.edu (8.12.10/8.12.10/LISTSERV) with ESMTP id i3C57s1Q040854 for
<LISTSERV@LISTSERV.VT.EDU>; Mon, 12 Apr 2004 01:07:54 -0400
Received: from mc2-s6.hotmail.com (mc2-s6.bay6.hotmail.com [64.4.44.145])
by vivi.cc.vt.edu (MOS 3.4.5-GR) with ESMTP id AOT17425; Mon,
12 Apr 2004 01:07:53 -0400 (EDT)
Received: from mc2-f24.hotmail.com ([65.54.190.31]) by mc2-s6.hotmail.com with
Microsoft SMTPSVC(5.0.2195.6824); Sun, 11 Apr 2004 22:07:52 -0700
Date: Sun, 11 Apr 2004 22:07:51 -0700
From: postmaster@mail.hotmail.com
Subject: Delivery Status Notification (Failure)
To: LISTSERV@LISTSERV.VT.EDU
Message-id: <uSfNKfRjw0000de07@mc2-f24.hotmail.com>
MIME-version: 1.0
Content-type: multipart/report; report-type=delivery-status;
boundary="Boundary_(ID_3xlX1rbo2yQRNHIBnZ6TUQ)"
X-Junkmail-Status: score=34/50, host=vivi.cc.vt.edu
X-OriginalArrivalTime: 12 Apr 2004 05:07:52.0620 (UTC)
FILETIME=[1B9E9EC0:01C4204C]
X-notice: Domain HOTMAIL.COM found in postmaster.rfc-ignorant.org
This is a MIME-formatted message.
Portions of this message may be unreadable without a MIME-capable mail program.
--Boundary_(ID_3xlX1rbo2yQRNHIBnZ6TUQ)
Content-type: text/plain; charset=unicode-1-1-utf-7
Content-transfer-encoding: 7BIT
This is an automatically generated Delivery Status Notification.
Delivery to the following recipients failed.
wxnjbs818378@HOTMAIL.COM
--Boundary_(ID_3xlX1rbo2yQRNHIBnZ6TUQ)
Content-type: message/delivery-status
Reporting-MTA: dns;mc2-f24.hotmail.com
Received-From-MTA: dns;listserv.vt.edu
Arrival-Date: Sun, 11 Apr 2004 22:07:13 -0700
Original-Recipient:
Final-Recipient: rfc822;wxnjbs818378@HOTMAIL.COM
Action: failed
Status: 5.0.0
Diagnostic-Code: smtp;550 Requested action not taken: mailbox unavailable
--Boundary_(ID_3xlX1rbo2yQRNHIBnZ6TUQ)
Content-type: message/rfc822
Return-path: <LISTSERV@LISTSERV.VT.EDU>
Received: from listserv.vt.edu ([198.82.161.192]) by mc2-f24.hotmail.com with
Microsoft SMTPSVC(5.0.2195.6824); Sun, 11 Apr 2004 22:07:13 -0700
Received: from listserv.vt.edu (LOCALHOST [127.0.0.1])
by listserv.vt.edu (8.12.10/8.12.10/LISTSERV) with ESMTP id i3C4lu26030836 for
<wxnjbs818378@HOTMAIL.COM>; Mon, 12 Apr 2004 01:07:11 -0400
Date: Mon, 12 Apr 2004 01:07:11 -0400
From: "L-Soft list server at LISTSERV.VT.EDU (1.8e)" <LISTSERV@listserv.vt.edu>
Subject: Message ("Your message dated Sun, 11 Apr 04 23:05:06 GMT...")
To: wxnjbs818378@HOTMAIL.COM
Message-id: <LISTSERV%2004041201071184@LISTSERV.VT.EDU>
MIME-version: 1.0
Content-type: TEXT/PLAIN
Content-transfer-encoding: 8BIT
X-OriginalArrivalTime: 12 Apr 2004 05:07:14.0127 (UTC)
FILETIME=[04AD0DF0:01C4204C]
Your message dated Sun, 11 Apr 04 23:05:06 GMT with subject "직장인론
신청하세요 6개월이상근무자 clrqy lhu iotgnuhca" has been submitted to the
moderator of the TURBVIS list: compt-gate@SOLARIS.CC.VT.EDU.
--Boundary_(ID_3xlX1rbo2yQRNHIBnZ6TUQ)--
--Boundary_(ID_uqeXnIdFkmGHACd+/c8bgA)--
--==_Exmh_13260916180--
--==_Exmh_1358914744P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFAqnjUcC3lWbTT17ARAvB0AJsGQoKxJrw4WHf6qU8SqcLOoj5xUgCg/aDG
AU5oF6+Grty/UAnjwRg5YO8=
=rNDB
-----END PGP SIGNATURE-----
--==_Exmh_1358914744P--
