[nycbug-talk] greylisting proxies?

[Okan Demirmen]

On Tue 2006.10.31 at 22:54 -0500, George Georgalis wrote:
> On Tue, Oct 31, 2006 at 09:21:24PM -0500, Okan Demirmen wrote:
> >On Tue 2006.10.31 at 20:48 -0500, George Georgalis wrote:
> >> does anyone using spamd (or greylist frontend) have trouble
> >> delivering to verizon.net?
> >
> >spamd(8) has little to nothing to do with delivering mail.
> 
> unless it blocks sender verification.

spamd(8) doesn't do anything in this area. spamlogd(8) will watch pflog0
for smtp traffic that your box is speaking with and will add that host
to it's whitelist. spamd(8) comes into play only in front of your MTA,
being on the same host or in front.

> >> 450 Requested mail action not taken-Try later:sv14pub.verizon.net
> >> 
> >> what's your solution? or do they do that (perpetually) for anyone
> >> not using a major ISP MX?
> >
> >you are obviously on the other side of greylisting. if you are having
> >issues delivering after getting 450, then it is you who should look at
> >your mail configuration.
> 
> Can you be more specific? what's wrong with this? it's the only
> response I or my mta gets.
> 
> # dnsmx verizon.net
> 0 relay.verizon.net
> # telnet relay.verizon.net 25
> Trying 206.46.232.11...
> Connected to relay.verizon.net.
> Escape character is '^]'.
> 220 sv27pub.verizon.net MailPass SMTP server v1.2.0 - 112105154401JY+PrW ready Tue, 31 Oct 2006 21:44:32 -0600
> helo galis.org
> 250 sv27pub.verizon.net
> mail from:<george at galis.org>
> 450 Requested mail action not taken-Try later:sv27pub.verizon.net
 
yes, smtp 450. well, as i mentioned before, you are being greylisted.
there are a few smtp error codes that your mta will honor, so as to try
again....which is exactly what the little message verizon decided to
place in the message.

> presumably they are checking envelope from for something (eg
> expecting my mx to do something spamd is not doing), because when
> I lie about envelope from, I get substantially improved results
>
> # telnet relay.verizon.net 25
> Trying 206.46.232.11...
> Connected to relay.verizon.net.
> Escape character is '^]'.
> 220 sv22pub.verizon.net MailPass SMTP server v1.2.0 - 112105154401JY+PrW ready Tue, 31 Oct 2006 21:48:30 -0600
> helo galis.org
> 250 sv22pub.verizon.net
> mail from:<georgalis at gmail.com>
> 250 Sender <georgalis at gmail.com> OK
> rcpt to:<nobody at verizon.net>
> 550 4.2.1 mailbox temporarily disabled: nobody at verizon.net
> quit
> 221 2.3.0 Bye received. Goodbye.
> Connection closed by foreign host.
> 
> 
> So my question is, does anybody running spamd deliver to
> verizon.net without providing a false envelope from?
> What do you do?

all depends on what other checks their mta is doing. maybe they don't
greylist for *@gmail.com...who knows....who cares...just send mail using
a non-broken mta.