OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: 550 Protocol violation (in reply to DATA command)

From: Wietse Venema (wietseporcupine.org)
Date: Tue Aug 08 2006 - 08:29:17 CDT


Alexander Gr?ner:
[ Charset ISO-8859-15 unsupported, converting... ]
> Hello :-)
>
> I have a random problem with a MX at web.de (a large mail provider in
> germany). I changed the real email adresses in this log.
>
> My postfix log shows:
>
> usermx:~> sudo grep 362812AFE4 /var/log/mail
>
> Aug 8 13:02:41 ns3 postfix/smtpd[2321]: 362812AFE4:
> client=localhost[127.0.0.1]
> Aug 8 13:02:41 ns3 postfix/cleanup[2397]: 362812AFE4:
> message-id=<OF286537C7.3776082F-ONC12571C4.003C43FA-C12571C4.003CAAF2mydomain.de>
> Aug 8 13:02:41 ns3 postfix/qmgr[2211]: 362812AFE4:
> from=<usermydomain.de>, size=1739, nrcpt=1 (queue active)
> Aug 8 13:02:41 ns3 postfix/smtp[2255]: A526227C33: to=<userweb.de>,
> relay=127.0.0.1[127.0.0.1], delay=1, status=sent (250 2.6.0 Ok,
> id=02479-02, from MTA: 250 Ok: queued as 362812AFE4)
> Aug 8 13:02:41 ns3 postfix/smtp[2214]: 362812AFE4: to=<userweb.de>,
> relay=mx-ha01.web.de[217.72.192.149], delay=0, status=bounced (host
> mx-ha01.web.de[217.72.192.149] said: 550 Protocol violation (in reply to
> DATA command))
> Aug 8 13:02:41 ns3 postfix/qmgr[2211]: 362812AFE4: removed

Google finds hundreds of hits for

    "550 Protocol violation" "web.de"

In other words, it's broken software.

One possible workaround is to put a diaper around web.de.

/etc/postfix/main.cf:
    transport_maps = hash:/etc/postfix/transport

/etc/postfix/transport:
    web.de borked

/etc/postfix/master.cf:
    borked unix - - n - - smtp
        -o soft_bounce=yes

If the same message is rejected repeatedly then I'd be interested
in a copy of the queue file.

        Wietse