On Wed, Jan 19, 2011 at 03:35:13PM -0500, Wietse Venema wrote:
> > 2011-01-19T15:05:00-05:00 amnesiac postfix/smtpd[17971]:
> > improper command pipelining after QUIT
> > from smtp-newslist-214.md02.com[209.172.40.214]
>
> And Postfix isn't lying. These hosts send some bytes after QUIT.
In this case, the programmer wrote code that sends sizeof("QUIT\r\n")
instead of strlen("QUIT\r\n") bytes. More incompetence than malice
perhaps?
21:05:43.751385 70.38.100.17.39547 > 192.0.2.1.25: P 161:168(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:05:45.136013 70.38.100.12.51036 > 192.0.2.1.25: P 22209:22216(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:05:47.291993 70.38.100.12.37035 > 192.0.2.1.25: P 22185:22192(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:05:47.345511 70.38.100.13.43728 > 192.0.2.1.25: P 21729:21736(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:06:06.433880 70.38.100.16.51706 > 192.0.2.1.25: P 22259:22266(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:06:22.715385 70.38.100.14.54664 > 192.0.2.1.25: P 22200:22207(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:06:56.545259 70.38.100.17.51451 > 192.0.2.1.25: P 22188:22195(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:06:58.904078 70.38.100.16.42460 > 192.0.2.1.25: P 22223:22230(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:07:05.012306 70.38.100.20.56425 > 192.0.2.1.25: P 22220:22227(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:07:09.050511 70.38.100.15.50450 > 192.0.2.1.25: P 22211:22218(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:07:11.766096 70.38.100.19.48360 > 192.0.2.1.25: P 22218:22225(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:07:32.774903 70.38.100.14.43814 > 192.0.2.1.25: P 22230:22237(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:08:57.119652 70.38.100.19.55420 > 192.0.2.1.25: P 22211:22218(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:01.757341 70.38.100.20.48535 > 192.0.2.1.25: P 166:173(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:04.105038 70.38.100.16.49455 > 192.0.2.1.25: P 22197:22204(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:04.120296 70.38.100.19.42425 > 192.0.2.1.25: P 22203:22210(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:07.632142 70.38.100.16.60225 > 192.0.2.1.25: P 22214:22221(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:11.550926 70.38.100.12.52427 > 192.0.2.1.25: P 22200:22207(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:11.619579 70.38.100.11.32844 > 192.0.2.1.25: P 22200:22207(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:11.626499 70.38.100.11.46435 > 192.0.2.1.25: P 22212:22219(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:11.654374 70.38.100.11.34347 > 192.0.2.1.25: P 22215:22222(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:38.649067 70.38.100.14.55355 > 192.0.2.1.25: P 22200:22207(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:46.527263 70.38.100.15.37267 > 192.0.2.1.25: P 155:162(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:49.352005 70.38.100.20.57185 > 192.0.2.1.25: P 22227:22234(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:09:59.768567 70.38.100.15.38387 > 192.0.2.1.25: P 22203:22210(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:11:20.499251 70.38.100.12.39936 > 192.0.2.1.25: P 22233:22240(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:11:50.663016 70.38.100.11.48601 > 192.0.2.1.25: P 22200:22207(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:11:50.812480 70.38.100.13.54236 > 192.0.2.1.25: P 22197:22204(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:11:51.091342 70.38.100.14.47611 > 192.0.2.1.25: P 22188:22195(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:11:51.137898 70.38.100.12.40325 > 192.0.2.1.25: P 160:167(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:11:51.141152 70.38.100.12.59412 > 192.0.2.1.25: P 155:162(7)
0x0034 5155 4954 0d0a 00 QUIT...
21:12:05.696192 70.38.100.12.33062 > 192.0.2.1.25: P 22194:22201(7)
0x0034 5155 4954 0d0a 00 QUIT...
--
Viktor.
