On Thu, Jan 25, 2007 at 10:06:48AM -0800, Eric Messick said:
> On 1/25/07, Stephen Gran <steve@???> wrote:
> >
> > The problem is apparently that, while you responsibly return icmp
> > unreachable for auth queries, they silently drop them, leaving you
> > reprobing them for auth before sending a greeting. This whole process
> > takes more than 30 seconds, so they tear down the conversation and
> > tempfail your mail.
>
> That sounds like an excellent theory. The only question I have is: why
> don't I see outgoing auth queries in the conversation?
You do:
> > 18 2.258134 198.144.198.191 209.51.152.98 TCP 4501 > auth [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=78345610 TSER=0 WS=0
> > 19 5.250159 198.144.198.191 209.51.152.98 TCP 4501 > auth [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=78345910 TSER=0 WS=0
> > 20 11.250251 198.144.198.191 209.51.152.98 TCP 4501 > auth [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=78346510 TSER=0 WS=0
> > 21 23.250406 198.144.198.191 209.51.152.98 TCP 4501 > auth [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=78347710 TSER=0 WS=0
> I'll look into probing them on auth, and trying to stomp them on my end, and
> see if that helps.
That sounds like a good plan.
--
--------------------------------------------------------------------------
| Stephen Gran | <rcw> those apparently-bacteria-like |
| steve@??? | multicolor worms coming out of |
| http://www.lobefin.net/~steve | microsoft's backorifice <rcw> that's |
| | the backoffice logo |
--------------------------------------------------------------------------
