OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Improper use of pipelining (Was: A perplexity about order of UCE restrictions)
From: Rask Ingemann Lambertsen (rask-postfixkampsax.k-net.dk)
Date: Wed Jun 07 2000 - 08:56:00 CDT

Den 04-Jun-00 13:21:47 skrev Wietse Venema fĝlgende om "Re: A perplexity about order of UCE restrictions":
>furio ercolessi:

[cut]
>> In: RCPT TO:<user1interactiva.it>
>> Out: 503 Improper use of SMTP command pipelining
>> In: RCPT TO:<user2interactiva.it>
>> Out: 503 Improper use of SMTP command pipelining
>> In: RCPT TO:<user3interactiva.it>
>> Out: 550 <unknown[63.86.156.243]>: Client host rejected: Spin UCE filter:
[cut]

>The first two recipients were sent ahead of server replies, and
>triggered the reject_unauth_pipelining restriction. The third
>recipient was not sent ahead of server replies, and triggered the
>access control restriction.

   What is odd is that it seems as if the last of the RCPT TO: commands
always slips through the pipelining check:

Jun 2 18:19:23 nevald postfix/smtpd[25048]: connect from unknown[63.86.156.243]
Jun 2 18:19:24 nevald postfix/smtpd[25048]: 4C4513C48A: client=unknown[63.86.156.243]
Jun 2 18:19:25 nevald postfix/smtpd[25048]: reject: RCPT from unknown[63.86.156.243]: 503 Improper use of SMTP command pipelining; from=<bbworld-services.com> to=<cjmcil0pop.uky.edu>
Jun 2 18:19:30 nevald postfix/smtpd[25048]: reject: RCPT from unknown[63.86.156.243]: 503 Improper use of SMTP command pipelining; from=<bbworld-services.com> to=<erjana00pop.uky.edu>
Jun 2 18:19:35 nevald postfix/smtpd[25048]: reject: RCPT from unknown[63.86.156.243]: 503 Improper use of SMTP command pipelining; from=<bbworld-services.com> to=<jsbyer0pop.uky.edu>
Jun 2 18:19:40 nevald postfix/smtpd[25048]: reject: RCPT from unknown[63.86.156.243]: 503 Improper use of SMTP command pipelining; from=<bbworld-services.com> to=<mdturn0pop.uky.edu>
Jun 2 18:19:45 nevald postfix/smtpd[25048]: reject: RCPT from unknown[63.86.156.243]: 503 Improper use of SMTP command pipelining; from=<bbworld-services.com> to=<dehanc0pop.uky.edu>
Jun 2 18:19:50 nevald postfix/smtpd[25048]: reject: RCPT from unknown[63.86.156.243]: 503 Improper use of SMTP command pipelining; from=<bbworld-services.com> to=<jdvanh00pop.uky.edu>
Jun 2 18:19:55 nevald postfix/smtpd[25048]: reject: RCPT from unknown[63.86.156.243]: 503 Improper use of SMTP command pipelining; from=<bbworld-services.com> to=<scyoun0pop.uky.edu>
Jun 2 18:20:00 nevald postfix/smtpd[25048]: reject: RCPT from unknown[63.86.156.243]: 503 Improper use of SMTP command pipelining; from=<bbworld-services.com> to=<occbplpop.uky.edu>
Jun 2 18:20:05 nevald postfix/smtpd[25048]: reject: RCPT from unknown[63.86.156.243]: 503 Improper use of SMTP command pipelining; from=<bbworld-services.com> to=<wowitt0pop.uky.edu>
Jun 2 18:20:10 nevald postfix/smtpd[25048]: reject: RCPT from unknown[63.86.156.243]: 554 <rsburn0pop.uky.edu>: Relay access denied; from=<bbworld-services.com> to=<rsburn0pop.uky.edu>
Jun 2 18:20:15 nevald postfix/smtpd[25048]: disconnect from unknown[63.86.156.243]

   I've not yet managed to make that happen in my own tests, so perhaps it
is just the way that the particular piece of spamware behaves, rather than
a small defect in code that detects improper use of pipelining.

   What is also odd is that the spamware is so stupid as to fail the
pipelining check in the first place...

Regards,

/ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻTŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ\
| Rask Ingemann Lambertsen | E-mail: mailto:raskkampsax.k-net.dk |
| Registered Phase5 developer | WWW: http://www.gbar.dtu.dk/~c948374/ |
| A4000, 896 kkeys/s (RC5-64) | "ThrustMe" on XPilot, ARCnet and IRC |
| Eight out of every five people are math illiterates. |