Victor Duchovni:
> On Wed, Jan 19, 2011 at 09:02:56PM +0100, Ralf Hildebrandt wrote:
>
> > 20 [209.172.40.218]
> >
> > Hm, all these hosts are in three networks...
>
> I see this too, only via smtpd(8) [postscreen not yet deployed here]:
>
> 2011-01-19T05:41:13-05:00 amnesiac postfix/smtpd[26869]:
> improper command pipelining after QUIT
> from smtp-newslist-217.md02.com[209.172.40.217]
>
> 2011-01-19T14:09:12-05:00 amnesiac postfix/smtpd[15269]:
> improper command pipelining after QUIT
> from smtp-newslist-214.md02.com[209.172.40.214]
>
> 2011-01-19T14:19:16-05:00 amnesiac postfix/smtpd[15790]:
> improper command pipelining after QUIT
> from smtp-newslist-211.md02.com[209.172.40.211]
>
> 2011-01-19T15:05:00-05:00 amnesiac postfix/smtpd[17971]:
> improper command pipelining after QUIT
> from smtp-newslist-214.md02.com[209.172.40.214]
And Postfix isn't lying. These hosts send some bytes after QUIT.
Unfortunately Postfix is in the middle of a code freeze right now.
I have been wanting to print the remainder of the read buffer for
a while now so we can see what those clients are sending.
It's basically
if ((len = vstream_peek(stream)) > 0) {
VSTRING_SPACE(buf, len);
vstream_fread(stream, STR(buf), len);
msg_info("pipelined content: %*s", (int) len, printable(STR(buf), '?');
}
or a prettier version that converts non-printable characters
to \stuff.
Wietse
