OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Helo command rejected : Why

From: Pascal Maes (pascal.maeselec.ucl.ac.be)
Date: Mon Jul 03 2006 - 02:49:28 CDT


Le 1 juil. 06 à 21:36, Pascal Maes a écrit :

>
> Le 1 juil. 06 à 21:26, Robert Felber a écrit :
>
>> On Sat, Jul 01, 2006 at 06:45:05PM +0200, Pascal Maes wrote:
>>> smtps inet n - n - - smtpd
>>> -o smtpd_proxy_filter=127.0.0.1:10025
>>> -o smtpd_tls_wrappermode=yes
>>> -o smtpd_use_tls=yes
>>> -o smtpd_tls_auth_only=yes
>>> -o smtpd_sasl_auth_enable=yes
>>> -o smtpd_sasl_security_options=noanonymous
>>> -o
>>> smtpd_helo_restrictions=permit_mynetworks,permit_sasl_authenticated,
>>> reje ct
>>> -o
>>> smtpd_sender_restrictions=permit_mynetworks,permit_sasl_authenticate
>>> d,re ject
>>
>>> submission inet n - n - - smtpd
>>> -o smtpd_proxy_filter=127.0.0.1:10025
>>> -o smtpd_etrn_restrictions=reject
>>> -o smtpd_use_tls=yes
>>> -o smtpd_tls_auth_only=yes
>>> -o smtpd_sasl_auth_enable=yes
>>> -o smtpd_sasl_security_options=noanonymous
>>> -o
>>> smtpd_helo_restrictions=permit_mynetworks,permit_sasl_authenticated,
>>> reje ct
>>> -o
>>> smtpd_sender_restrictions=permit_mynetworks,permit_sasl_authenticate
>>> d,re ject
>>
>> Is it possible that germany1 tries to deliver either to port 465
>> or 587?
>> My bet is 587:
>>
>> [robtonefpsvr1z150:~]% telnet smtp-3.dynsipr.ucl.ac.be 587
>> Trying 130.104.4.3...
>> Connected to smtp-3.dynsipr.ucl.ac.be.
>> Escape character is '^]'.
>> 220 smtp-3.dynsipr.ucl.ac.be ESMTP
>> HELO test1.ek-muc.de
>> 250 smtp-3.dynsipr.ucl.ac.be
>> MAIL FROM: robtoneek-muc.de
>> 250 2.1.0 Ok
>> RCPT TO: Sabrina.Costantiniclin.ucl.ac.be
>> 554 5.7.1 <test1.ek-muc.de>: Helo command rejected: Access denied
>>
>>
>> --
>> Robert Felber (PGP: 896CF30B)
>> Munich, Germany
>>
>
> In that case, they should have problems with every domains where
> they could not be authentified !
>
> I will ask them on Monday.

Jul 3 09:22:07 smtp-3 postfix/cleanup[27452]: 9EDCC8EB: hold: header
Received: from smtp-3.dynsipr.ucl.ac.be (localhost.localdomain
[127.0.0.1])??by smtp-3.dynsipr.ucl.ac.be (Postfix) with ESMTP id
9EDCC8EB;??Mon, 3 Jul 2006 09:19:42 +0200 (CEST) from
germany2.chiltern.com[217.7.78.26];
from=<sebastien.ducarmechiltern.com> to=<pascal.maesuclouvain.be>
proto=ESMTP helo=<german1.chiltern.com>
Jul 3 09:22:07 smtp-3 postfix/cleanup[27452]: 9EDCC8EB: message-
id=<20060703071942.9EDCC8EBsmtp-3.dynsipr.ucl.ac.be>
Jul 3 09:22:07 smtp-3 clamsmtpd: 20FB11:
from=sebastien.ducarmechiltern.com, to=pascal.maesuclouvain.be,
to=pascal.maesuclouvain.be, status=CLEAN

We have try with telnet on port 25 and it works... Not easy because
they have a windows system and they can't see what they type so we
got a lot of typo errors.

But when they send a message with their mail client, they got the
same error than before.
They will contact their "head system manager" to ask some questions...

--
Pascal