Browsed by
Tag: email

Quando l’MX è indeciso…

Quando l’MX è indeciso…

Comments 0 Comment

Ho un piccolo hosting su AwardSpace, comprato più per provare il servizio che per altro. Oggi così per curiosità ho dato un occhio agli headers di una mail in entrata. Sono rimasto O_O (è difficile descrivere a parole).

Return-Path: <donotreply@akismet.com>
X-Original-To: giorgio@FAKEDOMAIN.COM
received: from mx2.runhosting.com (mx2.runhosting.com [82.197.130.202])by mbox2.runhosting.com (Postfix) with ESMTP id 4B1F3607F34Efor <giorgio@FAKEDOMAIN.COM>; Sat, 22 Jan 2011 16:03:26 +0000 (UTC)
received: from mx2.runhosting.com (in2.defender.mail [82.197.130.203])by mx2.runhosting.com (Postfix) with ESMTP id B26D850600for <giorgio@FAKEDOMAIN.COM>; Sun, 23 Jan 2011 00:07:07 +0000 (UTC)
received: by mx2.runhosting.com (Postfix, from userid 65534)id A426C50615; Sun, 23 Jan 2011 00:07:07 +0000 (UTC)
received: from mail2.runhosting.com (mail2.runhosting.com [82.197.130.204])by mx2.runhosting.com (Postfix) with ESMTP id 6390C50600for <giorgio@FAKEDOMAIN.COM>; Sun, 23 Jan 2011 00:07:06 +0000 (UTC)
received: from mail2.runhosting.com (unknown [82.197.130.206])by mail2.runhosting.com (Postfix) with ESMTP id 965413EADCfor <giorgio@FAKEDOMAIN.COM>; Sun, 23 Jan 2011 00:07:06 +0000 (UTC)
received: by mail2.runhosting.com (Postfix, from userid 65534)id 7D3163F708; Sun, 23 Jan 2011 00:07:06 +0000 (UTC)
received: from mbox2.runhosting.com (mbox2.runhosting.com [82.197.130.207])(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))(No client certificate requested)by mail2.runhosting.com (Postfix) with ESMTPS id 088E63EADCfor <giorgio@FAKEDOMAIN.COM>; Sun, 23 Jan 2011 00:07:05 +0000 (UTC)
received: from mx2.runhosting.com (mx2.runhosting.com [82.197.130.202])by mbox2.runhosting.com (Postfix) with ESMTP id 8F221607F34Efor <admin@FAKEDOMAIN.COM>; Sat, 22 Jan 2011 16:02:54 +0000 (UTC)
received: from mx2.runhosting.com (in2.defender.mail [82.197.130.203])by mx2.runhosting.com (Postfix) with ESMTP id 14FC850600for <admin@FAKEDOMAIN.COM>; Sun, 23 Jan 2011 00:06:36 +0000 (UTC)
received: by mx2.runhosting.com (Postfix, from userid 65534)id F17CC50615; Sun, 23 Jan 2011 00:06:35 +0000 (UTC)
received: from smtp1.sat.wordpress.com (smtp1.sat.wordpress.com [76.74.254.15])by mx2.runhosting.com (Postfix) with ESMTP id 192E950600for <admin@FAKEDOMAIN.COM>; Sun, 23 Jan 2011 00:06:33 +0000 (UTC)
received: from smtp1.sat.wordpress.com (localhost.localdomain [127.0.0.1])by smtp1.sat.wordpress.com (Postfix) with ESMTP id 02EC4241C198for <admin@FAKEDOMAIN.COM>; Sat, 22 Jan 2011 16:02:57 +0000 (UTC)
received: from _ (c6.sat.akismet.com [66.135.58.48])by smtp1.sat.wordpress.com (Postfix) with ESMTP id E7883241C18Afor <admin@FAKEDOMAIN.COM>; Sat, 22 Jan 2011 16:02:56 +0000 (UTC)
X-Spam-Score: -2.0
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on in2.defender.mail
X-Spam-Level:
X-Spam-Status: No, score=-2.0 required=5.0 tests=AWL autolearn=disabledversion=3.2.5
Dkim-Signature: v=1; a=rsa-sha1; c=relaxed; d=akismet.com; h=date:to:from:subject:message-id:reply-to:mime-version:content-transfer-encoding:content-type; s=my3; bh=CC4iVqFNhHYEprW6wy8MS/KCPqo=; b=l28OC3lmyUmdoLIK+8ts7rfM9RV81WUySnA3O6aDa55rCS00aSTV8Cp70ziz0e6mrbOuoRwPPanQC77Xm/agtA==
Domainkey-Signature: a=rsa-sha1; c=nofws; d=akismet.com; h=date:to:from:subject:message-id:reply-to:mime-version:content-transfer-encoding:content-type; q=dns; s=my3; b=weli02Y9jlA0+tE5g8DpzJAwO+PFYAPGqC4iAOw7AYXthPs3m2Rx//oJ2iN2kkL6/Ixa1Ba9raPhtNxoNlqYtg==
Date: Sat, 22 Jan 2011 16:02:56 +0000
To: admin@FAKEDOMAIN.COM
From: Akismet Support <support@akismet.com>
Subject: Your new Akismet API key
Message-Id: <2c88cc629485167f7c160c4737027367@_>
X-Priority: 3
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version 2.0.4]
Reply-To: support@akismet.com
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=”UTF-8″
x-virus-scanned: ClamAV using ClamSMTP (in2.defender.mail(82.197.130.203), client: 82.197.130.202)
x-virus-scanned: ClamAV using ClamSMTP (out2.defender.mail(82.197.130.206), client: 82.197.130.204)
x-virus-scanned: ClamAV using ClamSMTP (in2.defender.mail(82.197.130.203), client: 82.197.130.202)

E’ spaventoso. C’è un forwarding che per qualche motivo a me sconosciuto non viene effettuato in locale pur essendo parte dello stesso dominio (probabilmente un doppio check antispam sulle mail in uscita). Si notano poi continui rimbalzi altrettanto inspiegabili (le mail tornano ad un certo nodo dopo che le ha buttate fuori lui stesso).

Chiederò spiegazioni al supporto.

UPDATE: @cxunix ha definito il fenomeno come “Il giro della posta in 80 MX”. Ci facciamo un film?

Hello MX!

Hello MX!

Comments 3 comments

A volte capita, dopo aver lanciato un HELO ad un MX, di ricevere risposte veramente simpatiche, carine, o stupide e inutili, comunque molto lontane dal default. Lo stesso, a volte, succede dopo il QUIT.

E’ curioso notare come gli amministratori di queste strutture si divertano a studiare queste risposte, quasi come fosse un must alla pari dell’antispam nel processo di configurazione di un mailserver.

Mi sembra quindi il caso di farne una sorta di rassegna di seguito:

Postini, il noto servizio di Google, appare molto freddo e professionale, mettendo subito in chiaro chi comanda:

 

mx-test:~# telnet google.com.s9a1.psmtp.com 25
Trying 74.125.148.10…
Connected to google.com.s9a1.psmtp.com.
Escape character is ‘^]’.
220 Postini ESMTP 213 y6_26_2c0 ready.  CA Business and Professions Code Section 17538.45 forbids use of this system for unsolicited electronic mail advertisements.
HELO mx-test.grg-web.eu
250 Postini says hello back
QUIT
221 Catch you later
Connection closed by foreign host.
mx-test:~#
Quando mi presento (HELO mx-test.grg-web.eu) però si calma e mi saluta tranquillamente. Anche alla chiusura, vengo salutato amichevolmente.
L’MX di Youtube appare meno cattivo ma ancora più freddo:
mx-test:~# telnet sjl-mbox1.sjl.youtube.com 25
Trying 208.65.153.154…
Connected to sjl-mbox1.sjl.youtube.com.
Escape character is ‘^]’.
220 sjl-mbox1.sjl.youtube.com ESMTP Postfix
HELO mx-test.grg-web.eu
250 sjl-mbox1.sjl.youtube.com
QUIT
221 Bye
Connection closed by foreign host.
mx-test:~#
GMail si dimostra subito sottomesso, dichiarando di essere “al mio servizio” e blaterando un qualche codice nella sua lingua:
mx-test:~# telnet gmail-smtp-in.l.google.com 25
Trying 209.85.129.27…
Connected to gmail-smtp-in.l.google.com.
Escape character is ‘^]’.
220 mx.google.com ESMTP 13si5734471fks.30
HELO mx-test.grg-web.eu
250 mx.google.com at your service
QUIT
221 2.0.0 closing connection 13si5734471fks.30
Connection closed by foreign host.
mx-test:~#
cPanel invece, dopo avermi spiegato chiaramente che non posso usarlo per inviare SPAM, mi sbugiarda facendo notare che non sono chi dico di essere (mx-test.grg-web.eu) ma ec2-79-125-117-117.eu-west-1.compute.amazonaws.com. Da notare, come GMail si dimentica di salutarmi quando me ne vado:
mx-test:~# telnet mx1.cpanel.net 25
Trying 208.74.121.68…
Connected to mx1.cpanel.net.
Escape character is ‘^]’.
220-mx1.cpanel.net ESMTP Exim 4.69 #1 Sun, 25 Apr 2010 04:04:28 -0500
220-We do not authorize the use of this system to transport unsolicited,
220 and/or bulk e-mail.
HELO mx-test.grg-web.eu
250 mx1.cpanel.net Hello ec2-79-125-117-117.eu-west-1.compute.amazonaws.com [79.125.117.117]
QUIT
221 mx1.cpanel.net closing connection
Connection closed by foreign host.
mx-test:~#
Microsoft Live Mail si comporta in modo molto simile:
mx-test:~# telnet mx1.hotmail.com 25
Trying 65.54.188.72…
Connected to mx1.hotmail.com.
Escape character is ‘^]’.
220 bay0-mc1-f17.Bay0.hotmail.com Sending unsolicited commercial or bulk e-mail to Microsoft’s computer network is prohibited. Other restrictions are found at http://privacy.msn.com/Anti-spam/. Violations will result in use of equipment located in California and other states. Sun, 25 Apr 2010 02:08:58 -0700
HELO mx-test.grg-web.eu
250 bay0-mc1-f17.Bay0.hotmail.com (3.10.0.73) Hello [79.125.117.117]
QUIT
221 bay0-mc1-f17.Bay0.hotmail.com Service closing transmission channel
Connection closed by foreign host.
mx-test:~#
Mi fa notare che non posso inviare SPAM, e mi dice in tono minaccioso quali saranno le conseguenze in caso di una eventuale violazione. Appena mi presento mi saluta, ma si dimentica di farlo quando me ne vado.
Molto nella norma, appare invece Yahoo, che va diretto al punto saltando i convenevoli:
mx-test:~# telnet a.mx.mail.yahoo.com 25
Trying 67.195.168.31…
Connected to a.mx.mail.yahoo.com.
Escape character is ‘^]’.
220 mta181.mail.ac4.yahoo.com ESMTP YSmtp service ready
HELO mx-test.grg-web.eu
250 mta181.mail.ac4.yahoo.com
QUIT
221 mta181.mail.ac4.yahoo.com
Connection closed by foreign host.
mx-test:~#
Simpatico invece GMX, che continua a ripetere il suo nome come se quasi non sentisse il resto. Non mi saluta:
mx-test:~# telnet mx0.gmx.net 25
Trying 213.165.64.100…
Connected to mx0.gmx.net.
Escape character is ‘^]’.
220 mx0.gmx.net GMX Mailservices ESMTP {mx061}
HELO mx-test.grg-web.eu
250 mx0.gmx.net GMX Mailservices {mx061}
QUIT
221 2.0.0 GMX Mailservices {mx061}
Connection closed by foreign host.
mx-test:~#
AOL prima di farmi parlare mette in chiaro le regole del gioco. Non mi saluta all’inizio ma solo all’uscita quasi come se volesse mandarmi via:
mx-test:~# telnet mailin-01.mx.aol.com 25
Trying 205.188.146.193…
Connected to mailin-01.mx.aol.com.
Escape character is ‘^]’.
220-mtain-dg04.r1000.mx.aol.com ESMTP Internet Inbound
220-AOL and its affiliated companies do not
220-authorize the use of its proprietary computers and computer
220-networks to accept, transmit, or distribute unsolicited bulk
220-e-mail sent from the internet.
220-Effective immediately:
220-AOL may no longer accept connections from IP addresses
220 which no do not have reverse-DNS (PTR records) assigned.
HELO mx-test.grg-web.eu
250 mtain-dg04.r1000.mx.aol.com
QUIT
221 2.0.0 Bye
Connection closed by foreign host.
mx-test:~#
Facebook, invece, è educatissimo:
mx-test:~# telnet mx.sf2p.tfbnw.net 25
Trying 69.63.176.71…
Connected to mx.sf2p.tfbnw.net.
Escape character is ‘^]’.
220 pp-in02.sf2p.tfbnw.net ESMTP Sun, 25 Apr 2010 02:22:01 -0700
HELO mx-test.grg-web.eu
250 pp-in02.sf2p.tfbnw.net Hello ec2-79-125-117-117.eu-west-1.compute.amazonaws.com [79.125.117.117], pleased to meet you
QUIT
221 2.0.0 pp-in02.sf2p.tfbnw.net closing connection
Connection closed by foreign host.
mx-test:~#
RackSpace tenta di fregarmi con un antiquato Greet-Pause, ma poi mi saluta:
mx-test:~# telnet mx1.sat.rackspace.com 25
Trying 64.39.1.223…
Connected to mx1.sat.rackspace.com.
Escape character is ‘^]’.
HELO mx-test.grg-web.eu
554 mx1.sat.rackspace.com ESMTP not accepting messages
250 mx1.sat.rackspace.com Hello ec2-79-125-117-117.eu-west-1.compute.amazonaws.com [79.125.117.117], pleased to meet you
QUIT
221 2.0.0 mx1.sat.rackspace.com closing connection
Connection closed by foreign host.
mx-test:~#
Inbox, infine, “fa il figo” sbandierando un server SMTP fatto in casa, un numero di versione che non finisce più e ilk nome del suo creatore (MatriX):
mx-test:~# telnet inc.inbox.com 25
Trying 64.135.83.90…
Connected to inc.inbox.com.
Escape character is ‘^]’.
220 WH96.inbox.com [InBox.Com SMTP Server] ver. 1.0.3504.17794 by MatriX ATC:61
HELO mx-test.grg-web.eu
250 WH96.inbox.com says hello
QUIT
221 [InBox.Com SMTP Server] service closing transmission channel
Connection closed by foreign host.
mx-test:~#
Se avete trovato qualcosa di peggio, segnalatemelo!
Giorgio