From: "Michael Northcott" on
Hello all, I've got a dilly of a pickle for you. Running
postfix-2.5.6-1.fc9.i386 on Fedora 9.

I do a simple telnet session on one windows computer and it works, I do the
exact same thing on the other windows computer and it does not work. Both
run Windows XP SP3 updated to latest as of 2010-06-07 (YMD), both have a
fairly simple setup and are only using English (Canada) as language, English
(Canada) - US keyboard, very few programs installed, yet something is
clearly different between them.


Here is my telnet session (as I am internal I can use whatever HELO I find
amusing at the time):

220 mail.<OBSCURED>.ca ESMTP Postfix
helo melo.yelo.jelo
250 mail.<OBSCURED>.ca
mail from:michaeln@<OBSCURED>.ca
250 2.1.0 Ok
rcpt to:michaeln@<OBSCURED>.ca
250 2.1.5 Ok
data
354 Start mail input; end with <CRLF>.<CRLF>
Subject: hi

hi

..
221 2.7.0 Error: I can break rules, too. Goodbye.

Connection to host lost.



Here are the corresponding log entries, with that system added to
debug_peer_list:


Jun 7 13:59:17 mail postfix/smtpd[25587]: connect from unknown[192.168.6.9]
Jun 7 13:59:17 mail postfix/smtpd[25587]: match_hostaddr: 192.168.6.9 ~?
<OBSCURED>
Jun 7 13:59:17 mail postfix/smtpd[25587]: match_hostaddr: 192.168.6.9 ~?
192.168.6.0/24
Jun 7 13:59:17 mail postfix/smtpd[25587]: > unknown[192.168.6.9]: 220
mail.<OBSCURED>.ca ESMTP Postfix
Jun 7 13:59:21 mail postfix/smtpd[25587]: < unknown[192.168.6.9]: helo
melo.yelo.jelo
Jun 7 13:59:21 mail postfix/smtpd[25587]: > unknown[192.168.6.9]: 250
mail.<OBSCURED>.ca
Jun 7 13:59:32 mail postfix/smtpd[25587]: < unknown[192.168.6.9]: mail
from:michaeln@<OBSCURED>.ca
Jun 7 13:59:32 mail postfix/smtpd[25587]: > unknown[192.168.6.9]: 250 2.1.0
Ok
Jun 7 13:59:40 mail postfix/smtpd[25587]: < unknown[192.168.6.9]: rcpt
to:michaeln@<OBSCURED>.ca
Jun 7 13:59:40 mail postfix/smtpd[25587]: permit_mynetworks: unknown
192.168.6.9
Jun 7 13:59:40 mail postfix/smtpd[25587]: match_hostaddr: 192.168.6.9 ~?
<OBSCURED>
Jun 7 13:59:40 mail postfix/smtpd[25587]: match_hostaddr: 192.168.6.9 ~?
192.168.6.0/24
Jun 7 13:59:40 mail postfix/smtpd[25587]: permit_mynetworks: unknown
192.168.6.9
Jun 7 13:59:40 mail postfix/smtpd[25587]: match_hostaddr: 192.168.6.9 ~?
<OBSCURED>
Jun 7 13:59:40 mail postfix/smtpd[25587]: match_hostaddr: 192.168.6.9 ~?
192.168.6.0/24
Jun 7 13:59:40 mail postfix/smtpd[25587]: permit_inet_interfaces: unknown
192.168.6.9
Jun 7 13:59:40 mail postfix/smtpd[25587]: C91D324059:
client=unknown[192.168.6.9]
Jun 7 13:59:40 mail postfix/smtpd[25587]: > unknown[192.168.6.9]: 250 2.1.5
Ok
Jun 7 13:59:49 mail postfix/smtpd[25587]: < unknown[192.168.6.9]: dataDATA
Jun 7 13:59:49 mail postfix/smtpd[25587]: > unknown[192.168.6.9]: 502 5.5.2
Error: command not recognized
Jun 7 13:59:49 mail postfix/smtpd[25587]: < unknown[192.168.6.9]: Subject:
hi
Jun 7 13:59:49 mail postfix/smtpd[25587]: warning: non-SMTP command from
unknown[192.168.6.9]: Subject: hi
Jun 7 13:59:49 mail postfix/smtpd[25587]: > unknown[192.168.6.9]: 221 2.7.0
Error: I can break rules, too. Goodbye.
Jun 7 13:59:49 mail postfix/smtpd[25587]: match_hostaddr: 192.168.6.9 ~?
<OBSCURED>
Jun 7 13:59:49 mail postfix/smtpd[25587]: match_hostaddr: 192.168.6.9 ~?
192.168.6.0/24
Jun 7 13:59:49 mail postfix/smtpd[25587]: disconnect from
unknown[192.168.6.9]


Note that what it seems to be doing is appending an extra "DATA" to my
"data" line, and I end up with "dataDATA". If I try capitalizing everything
I end up with that line saying "DATADATA". I've never seen anything like
this before. I tried pasting the lines one at a time via remote desktop, I
tried typing them in, I tried the universal problem solver on XP of
restarting the computer, no luck. This system works fine in every other way
that I can tell, it just for some reason cannot do a proper telnet to our
mailserver it seems. I also tried entering DATA and hitting enter 3 times,
and the log shows one line of "DATADATA" and does not log the other two
attempts, even though each time the server responds with "354 Start mail
input; end with <CRLF>.<CRLF>". Google does not seem to know about this
issue at all.

Though I realize the problem is probably mostly due to windows, there's got
to be a way to solve this, a better way to debug this, whatever. Ontop of
that, if it is possible to happen to me, it could very well happen to
someone else. If I have to, I will format this system completely to resolve
the issue, but the fact that it was possible to occur strikes me as a
problem. If the issue is found to be interesting enough, I can offer remote
desktop and ssh access, but obviously only to someone trustworthy.


Thanks,


Mike

From: Wietse Venema on
Michael Northcott:
> 354 Start mail input; end with <CRLF>.<CRLF>

That is not Postfix. Perhaps you are talking to some antivirus software.

The Postfix response is: "354 End data with <CR><LF>.<CR><LF>".

Wietse

From: "Michael Northcott" on
Aha! Thanks, that explains a lot. I thought I turned off the mail filtering
but I guess not. So this "security" program must be mangling all SMTP
sessions that do not look like Outlook - what a great "solution".

This seems consistent with the overall poor quality of the rest of the
security suite. (Disclosure: program involved is Trend Micro Internet
Security 2010)


Thanks,


Mike



-----Original Message-----
From: owner-postfix-users(a)postfix.org
[mailto:owner-postfix-users(a)postfix.org] On Behalf Of Wietse Venema
Sent: Tuesday, June 08, 2010 9:32 AM
To: Postfix users
Subject: Re: interesting SMTP issue /w Windows + Telnet

Michael Northcott:
> 354 Start mail input; end with <CRLF>.<CRLF>

That is not Postfix. Perhaps you are talking to some antivirus software.

The Postfix response is: "354 End data with <CR><LF>.<CR><LF>".

Wietse