* Victor Duchovni <victor.ducho...@morganstanley.com>:

> Do you have a tcpdump capture? From the above it sounds like HELO is
> sent before the 220 banner. That's a protocol error.

No tcpdump, but I have this:
Sep 30 15:23:53 mail postfix/postscreen[21955]: CONNECT from 192.109.31.12
Sep 30 15:23:53 mail postfix/postscreen[21955]: PREGREET 27 after 0.01 from 
192.109.31.12: HELO mail.embl-hamburg.de??
Sep 30 15:23:53 mail postfix/postscreen[21955]: NOQUEUE: reject: RCPT from 
[192.109.31.12]: 550 5.5.1 Protocol error; from=<>,
to=<valid.recipi...@charite.de>, proto=SMTP, helo=<mail.embl-hamburg.de>
Sep 30 15:23:53 mail postfix/postscreen[21955]: NOQUEUE: reject: RCPT from 
[192.109.31.12]: 550 5.5.1 Protocol error;
from=<postmas...@embl-hamburg.de>, to=<valid.recipi...@charite.de>, proto=SMTP, 
helo=<mail.embl-hamburg.de>
Sep 30 15:23:53 mail postfix/postscreen[21955]: DISCONNECT 192.109.31.12
Sep 30 15:53:56 mail postfix/postscreen[10531]: CONNECT from 192.109.31.12
Sep 30 15:53:56 mail postfix/postscreen[10531]: WHITELISTED 192.109.31.12
Sep 30 15:53:56 mail postfix/postscreen[10531]: PASS OLD 192.109.31.12
Sep 30 15:53:56 mail postfix/smtpd[10563]: connect from 
mail.EMBL-Hamburg.DE[192.109.31.12]
Sep 30 15:53:56 mail postfix/smtpd[10563]: NOQUEUE: 
client=mail.EMBL-Hamburg.DE[192.109.31.12]
Sep 30 15:53:56 mail postfix/smtpd[10563]: disconnect from 
mail.EMBL-Hamburg.DE[192.109.31.12]

which seems to back our both assumptions.

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebra...@charite.de | http://www.charite.de
            

Reply via email to