On Tue, 2004-02-24 at 20:22, Tabor J. Wells wrote:
> On Wed, Feb 25, 2004 at 01:53:16PM +1100,
> Simon Lai <simon@???> is thought to have said:
>
> > When exim calls our server, the conversation goes like this -
> >
> > 220 java.z1 Borg SMTP 1.0 - you will be assimilated
> > EHLO exim-colo-01.whoc.theplanet.co.uk
> > 250-HELP
> > 250-STARTTLS
> > 250-AUTH=LOGIN
> > 250 AUTH LOGIN
> > STARTTLS
> > 220 Ready to start TLS
> > /*TLS session starts*/
> > 220 java.z1 Borg SMTP 1.0 - you will be assimilated
> > EHLO exim-colo-01.whoc.theplanet.co.uk
> > 250-HELP
> > 250-STARTTLS
> > 250-AUTH=LOGIN
> > 250 AUTH LOGIN
> > MAIL FROM:<exim-users-admin@???>
> > RCPT TO:<7j36hwgb@???>
> > 250 OK
> > DATA
> > 354 Start mail input; end with <CRLF>.<CRLF>
>
> This is not what I see:
>
> Connecting to id.synatech.com.au [216.74.75.151]:25 ... connected
> SMTP<< 220 java.z1 Borg SMTP 1.0 - you will be assimilated
> SMTP>> EHLO pulse.fsckit.net
> SMTP<< 250-HELP
> 250-STARTTLS
> 250-AUTH=LOGIN
> 250 AUTH LOGIN
> SMTP>> STARTTLS
> SMTP<< 220 Ready to start TLS
> SMTP>> EHLO pulse.fsckit.net
> SMTP<< 220 java.z1 Borg SMTP 1.0 - you will be assimilated
> SMTP>> MAIL FROM:<twells@???>
> SMTP<< 250-HELP
> 250-AUTH=LOGIN
> 250 AUTH LOGIN
> SMTP>> RCPT TO:<7j36hwgb@???>
> SMTP<< 250 OK
> SMTP>> DATA
> SMTP<< 250 OK
> SMTP>> QUIT
> LOG: MAIN
> == 7j36hwgb@??? R=lookuphost T=remote_smtp defer (0): SMTP
> error from remote mailer after DATA: host id.synatech.com.au
> [216.74.75.151]: 250 OK
>
> The 250 response after DATA is wrong.
Hmm, I, in turn, see something yet different:
Connecting to id.synatech.com.au [216.74.75.151]:25 ... connected
SMTP<< 220 java.z1 Borg_SMTP_1.0 - you will be assimilated log:
20040305-23:09:30-4904
SMTP>> EHLO net.slett.net
SMTP<< 250-java.z1 greets net.slett.net, you are species 53
250-HELP
250-STARTTLS
250-AUTH=LOGIN
250 AUTH LOGIN
SMTP>> STARTTLS
SMTP<< 220 Ready to start TLS
SMTP>> EHLO net.slett.net
SMTP<< 250-java.z1 greets net.slett.net, you are species 438
250-HELP
250-AUTH=LOGIN
250 AUTH LOGIN
SMTP>> MAIL FROM:<tor@???>
SMTP<< 250 OK
SMTP>> RCPT TO:<7j36hwgb@???>
SMTP<< 250 OK
SMTP>> DATA
SMTP<< 354 Start mail input; end with <CRLF>.<CRLF>
SMTP>> writing message and terminating "."
SMTP<< 250 OK - job 31585 accepted
SMTP>> QUIT
LOG: MAIN
=> 7j36hwgb@??? R=dnslookup T=remote_smtp
H=id.synatech.com.au [216.74.75.151] X=TLS-1.0:RSA_ARCFOUR_SHA:16
LOG: MAIN
Completed
Maybe this one problem got fixed?
So anyway, what is this thing, another Spamware tool?
-tor
