<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Giorgio (GrG) Bonfiglio &#187; mail</title>
	<atom:link href="http://blog.grg-web.eu/tag/mail/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.grg-web.eu</link>
	<description>- Sistemista, Fotografo, Studente POLIMI</description>
	<lastBuildDate>Thu, 05 Jan 2012 18:07:24 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Hello MX!</title>
		<link>http://blog.grg-web.eu/2010/04/hello-mx/</link>
		<comments>http://blog.grg-web.eu/2010/04/hello-mx/#comments</comments>
		<pubDate>Sun, 25 Apr 2010 09:34:08 +0000</pubDate>
		<dc:creator>Giorgio Bonfiglio</dc:creator>
				<category><![CDATA[Servers]]></category>
		<category><![CDATA[Servizi & Utilities]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[mail]]></category>
		<category><![CDATA[mailserver]]></category>
		<category><![CDATA[mx]]></category>
		<category><![CDATA[relay]]></category>
		<category><![CDATA[smtp]]></category>

		<guid isPermaLink="false">http://blog.grg-web.eu/?p=140</guid>
		<description><![CDATA[
A volte capita, dopo aver lanciato un HELO ad un MX, di ricevere risposte veramente simpatiche, carine, o stupide e inutili, comunque molto lontane dal default. Lo stesso, a volte, succede dopo il QUIT.
E&#8217; curioso notare come gli amministratori di queste strutture si divertano a studiare queste  [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: center;"><img class="aligncenter size-medium wp-image-239" src="http://blog.grg-web.eu/wp-content/2010/04/email2-300x246.jpg" alt="" width="300" height="246" /></p>
<p style="text-align: justify;">A volte capita, dopo aver lanciato un HELO ad un MX, di ricevere risposte veramente simpatiche, carine, o stupide e inutili, comunque molto lontane dal default. Lo stesso, a volte, succede dopo il QUIT.</p>
<p style="text-align: justify;">E&#8217; curioso notare come gli amministratori di queste strutture si divertano a studiare queste risposte, quasi come fosse un must alla pari dell&#8217;antispam nel processo di configurazione di un mailserver.</p>
<p style="text-align: justify;">Mi sembra quindi il caso di farne una sorta di rassegna di seguito:</p>
<p style="text-align: justify;"><a href="http://www.google.com/postini/index.html">Postini</a>, il noto servizio di Google, appare molto freddo e professionale, mettendo subito in chiaro chi comanda:</p>
<p style="text-align: justify;">&nbsp;</p>
<div id="_mcePaste" style="text-align: justify;">
<blockquote>
<div id="_mcePaste" style="text-align: justify;">mx-test:~# telnet google.com.s9a1.psmtp.com 25</div>
<div id="_mcePaste" style="text-align: justify;">Trying 74.125.148.10&#8230;</div>
<div id="_mcePaste" style="text-align: justify;">Connected to google.com.s9a1.psmtp.com.</div>
<div id="_mcePaste" style="text-align: justify;">Escape character is &#8216;^]&#8217;.</div>
<div id="_mcePaste" style="text-align: justify;">220 Postini ESMTP 213 y6_26_2c0 ready.  CA Business and Professions Code Section 17538.45 forbids use of this system for unsolicited electronic mail advertisements.</div>
<div id="_mcePaste" style="text-align: justify;">HELO mx-test.grg-web.eu</div>
<div id="_mcePaste" style="text-align: justify;">250 Postini says hello back</div>
<div id="_mcePaste" style="text-align: justify;">QUIT</div>
<div id="_mcePaste" style="text-align: justify;">221 Catch you later</div>
<div id="_mcePaste" style="text-align: justify;">Connection closed by foreign host.</div>
<div id="_mcePaste" style="text-align: justify;">mx-test:~#</div>
</blockquote>
<div style="text-align: justify;">Quando mi presento (HELO mx-test.grg-web.eu) però si calma e mi saluta tranquillamente. Anche alla chiusura, vengo salutato amichevolmente.</div>
</div>
<div style="text-align: justify;">L&#8217;MX di <a href="http://www.youtube.com">Youtube</a> appare meno cattivo ma ancora più freddo:</div>
<div style="text-align: justify;">
<blockquote>
<div style="text-align: justify;">mx-test:~# telnet sjl-mbox1.sjl.youtube.com 25</div>
<div style="text-align: justify;">Trying 208.65.153.154&#8230;</div>
<div style="text-align: justify;">Connected to sjl-mbox1.sjl.youtube.com.</div>
<div style="text-align: justify;">Escape character is &#8216;^]&#8217;.</div>
<div style="text-align: justify;">220 sjl-mbox1.sjl.youtube.com ESMTP Postfix</div>
<div style="text-align: justify;">HELO mx-test.grg-web.eu</div>
<div style="text-align: justify;">250 sjl-mbox1.sjl.youtube.com</div>
<div style="text-align: justify;">QUIT</div>
<div style="text-align: justify;">221 Bye</div>
<div style="text-align: justify;">Connection closed by foreign host.</div>
<div style="text-align: justify;">mx-test:~#</div>
</blockquote>
<div style="text-align: justify;"><a href="http://www.gmail.com">GMail</a> si dimostra subito sottomesso, dichiarando di essere &#8220;al mio servizio&#8221; e blaterando un qualche codice nella sua lingua:</div>
<blockquote>
<div>
<div>mx-test:~# telnet gmail-smtp-in.l.google.com 25</div>
<div>Trying 209.85.129.27&#8230;</div>
<div>Connected to gmail-smtp-in.l.google.com.</div>
<div>Escape character is &#8216;^]&#8217;.</div>
<div>220 mx.google.com ESMTP 13si5734471fks.30</div>
<div>HELO mx-test.grg-web.eu</div>
<div>250 mx.google.com at your service</div>
<div>QUIT</div>
<div>221 2.0.0 closing connection 13si5734471fks.30</div>
<div>Connection closed by foreign host.</div>
<div>mx-test:~#</div>
</div>
</blockquote>
<div><a href="http://www.cpanel.net">cPanel</a> invece, dopo avermi spiegato chiaramente che non posso usarlo per inviare SPAM, mi sbugiarda facendo notare che non sono chi dico di essere (mx-test.grg-web.eu) ma ec2-79-125-117-117.eu-west-1.compute.amazonaws.com. Da notare, come GMail si dimentica di salutarmi quando me ne vado:</div>
<div>
<blockquote>
<div>mx-test:~# telnet mx1.cpanel.net 25</div>
<div>Trying 208.74.121.68&#8230;</div>
<div>Connected to mx1.cpanel.net.</div>
<div>Escape character is &#8216;^]&#8217;.</div>
<div>220-mx1.cpanel.net ESMTP Exim 4.69 #1 Sun, 25 Apr 2010 04:04:28 -0500</div>
<div>220-We do not authorize the use of this system to transport unsolicited,</div>
<div>220 and/or bulk e-mail.</div>
<div>HELO mx-test.grg-web.eu</div>
<div>250 mx1.cpanel.net Hello ec2-79-125-117-117.eu-west-1.compute.amazonaws.com [79.125.117.117]</div>
<div>QUIT</div>
<div>221 mx1.cpanel.net closing connection</div>
<div>Connection closed by foreign host.</div>
<div>mx-test:~#</div>
</blockquote>
<div><a href="http://mail.live.com">Microsoft Live Mail</a> si comporta in modo molto simile:</div>
<div>
<blockquote>
<div>mx-test:~# telnet mx1.hotmail.com 25</div>
<div>Trying 65.54.188.72&#8230;</div>
<div>Connected to mx1.hotmail.com.</div>
<div>Escape character is &#8216;^]&#8217;.</div>
<div>220 bay0-mc1-f17.Bay0.hotmail.com Sending unsolicited commercial or bulk e-mail to Microsoft&#8217;s computer network is prohibited. Other restrictions are found at http://privacy.msn.com/Anti-spam/. Violations will result in use of equipment located in California and other states. Sun, 25 Apr 2010 02:08:58 -0700</div>
<div>HELO mx-test.grg-web.eu</div>
<div>250 bay0-mc1-f17.Bay0.hotmail.com (3.10.0.73) Hello [79.125.117.117]</div>
<div>QUIT</div>
<div>221 bay0-mc1-f17.Bay0.hotmail.com Service closing transmission channel</div>
<div>Connection closed by foreign host.</div>
<div>mx-test:~#</div>
</blockquote>
<div style="text-align: justify;">Mi fa notare che non posso inviare SPAM, e mi dice in tono minaccioso quali saranno le conseguenze in caso di una eventuale violazione. Appena mi presento mi saluta, ma si dimentica di farlo quando me ne vado.</div>
</div>
<div style="text-align: justify;">Molto nella norma, appare invece <a href="http://mail.yahoo.com/">Yahoo</a>, che va diretto al punto saltando i convenevoli:</div>
<div style="text-align: justify;">
<blockquote>
<div style="text-align: justify;">mx-test:~# telnet a.mx.mail.yahoo.com 25</div>
<div style="text-align: justify;">Trying 67.195.168.31&#8230;</div>
<div style="text-align: justify;">Connected to a.mx.mail.yahoo.com.</div>
<div style="text-align: justify;">Escape character is &#8216;^]&#8217;.</div>
<div style="text-align: justify;">220 mta181.mail.ac4.yahoo.com ESMTP YSmtp service ready</div>
<div style="text-align: justify;">HELO mx-test.grg-web.eu</div>
<div style="text-align: justify;">250 mta181.mail.ac4.yahoo.com</div>
<div style="text-align: justify;">QUIT</div>
<div style="text-align: justify;">221 mta181.mail.ac4.yahoo.com</div>
<div style="text-align: justify;">Connection closed by foreign host.</div>
<div style="text-align: justify;">mx-test:~#</div>
</blockquote>
<div style="text-align: justify;">Simpatico invece <a href="http://www.gmx.com">GMX</a>, che continua a ripetere il suo nome come se quasi non sentisse il resto. Non mi saluta:</div>
<div style="text-align: justify;">
<blockquote>
<div style="text-align: justify;">mx-test:~# telnet mx0.gmx.net 25</div>
<div style="text-align: justify;">Trying 213.165.64.100&#8230;</div>
<div style="text-align: justify;">Connected to mx0.gmx.net.</div>
<div style="text-align: justify;">Escape character is &#8216;^]&#8217;.</div>
<div style="text-align: justify;">220 mx0.gmx.net GMX Mailservices ESMTP {mx061}</div>
<div style="text-align: justify;">HELO mx-test.grg-web.eu</div>
<div style="text-align: justify;">250 mx0.gmx.net GMX Mailservices {mx061}</div>
<div style="text-align: justify;">QUIT</div>
<div style="text-align: justify;">221 2.0.0 GMX Mailservices {mx061}</div>
<div style="text-align: justify;">Connection closed by foreign host.</div>
<div style="text-align: justify;">mx-test:~#</div>
</blockquote>
<div style="text-align: justify;"><a href="http://www.aol.com">AOL</a> prima di farmi parlare mette in chiaro le regole del gioco. Non mi saluta all&#8217;inizio ma solo all&#8217;uscita quasi come se volesse mandarmi via:</div>
<div style="text-align: justify;">
<blockquote>
<div>mx-test:~# telnet mailin-01.mx.aol.com 25</div>
<div>Trying 205.188.146.193&#8230;</div>
<div>Connected to mailin-01.mx.aol.com.</div>
<div>Escape character is &#8216;^]&#8217;.</div>
<div>220-mtain-dg04.r1000.mx.aol.com ESMTP Internet Inbound</div>
<div>220-AOL and its affiliated companies do not</div>
<div>220-authorize the use of its proprietary computers and computer</div>
<div>220-networks to accept, transmit, or distribute unsolicited bulk</div>
<div>220-e-mail sent from the internet.</div>
<div>220-Effective immediately:</div>
<div>220-AOL may no longer accept connections from IP addresses</div>
<div>220 which no do not have reverse-DNS (PTR records) assigned.</div>
<div>HELO mx-test.grg-web.eu</div>
<div>250 mtain-dg04.r1000.mx.aol.com</div>
<div>QUIT</div>
<div>221 2.0.0 Bye</div>
<div>Connection closed by foreign host.</div>
<div>mx-test:~#</div>
</blockquote>
<div><a href="http://www.facebook.com">Facebook</a>, invece, è educatissimo:</div>
<div>
<blockquote>
<div>mx-test:~# telnet mx.sf2p.tfbnw.net 25</div>
<div>Trying 69.63.176.71&#8230;</div>
<div>Connected to mx.sf2p.tfbnw.net.</div>
<div>Escape character is &#8216;^]&#8217;.</div>
<div>220 pp-in02.sf2p.tfbnw.net ESMTP Sun, 25 Apr 2010 02:22:01 -0700</div>
<div>HELO mx-test.grg-web.eu</div>
<div>250 pp-in02.sf2p.tfbnw.net Hello ec2-79-125-117-117.eu-west-1.compute.amazonaws.com [79.125.117.117], pleased to meet you</div>
<div>QUIT</div>
<div>221 2.0.0 pp-in02.sf2p.tfbnw.net closing connection</div>
<div>Connection closed by foreign host.</div>
<div>mx-test:~#</div>
</blockquote>
<div><a href="http://www.rackspace.com">RackSpace</a> tenta di fregarmi con un antiquato <a href="http://www.deer-run.com/~hal/sysadmin/greet_pause.html">Greet-Pause</a>, ma poi mi saluta:</div>
<div>
<blockquote>
<div>mx-test:~# telnet mx1.sat.rackspace.com 25</div>
<div>Trying 64.39.1.223&#8230;</div>
<div>Connected to mx1.sat.rackspace.com.</div>
<div>Escape character is &#8216;^]&#8217;.</div>
<div>HELO mx-test.grg-web.eu</div>
<div>554 mx1.sat.rackspace.com ESMTP not accepting messages</div>
<div>250 mx1.sat.rackspace.com Hello ec2-79-125-117-117.eu-west-1.compute.amazonaws.com [79.125.117.117], pleased to meet you</div>
<div>QUIT</div>
<div>221 2.0.0 mx1.sat.rackspace.com closing connection</div>
<div>Connection closed by foreign host.</div>
<div>mx-test:~#</div>
</blockquote>
<div><a href="http://www.inbox.com">Inbox</a>, infine, &#8220;fa il figo&#8221; sbandierando un server SMTP fatto in casa, un numero di versione che non finisce più e ilk nome del suo creatore (MatriX):</div>
<div>
<blockquote>
<div>mx-test:~# telnet inc.inbox.com 25</div>
<div>Trying 64.135.83.90&#8230;</div>
<div>Connected to inc.inbox.com.</div>
<div>Escape character is &#8216;^]&#8217;.</div>
<div>220 WH96.inbox.com [InBox.Com SMTP Server] ver. 1.0.3504.17794 by MatriX ATC:61</div>
<div>HELO mx-test.grg-web.eu</div>
<div>250 WH96.inbox.com says hello</div>
<div>QUIT</div>
<div>221 [InBox.Com SMTP Server] service closing transmission channel</div>
<div>Connection closed by foreign host.</div>
<div>mx-test:~#</div>
</blockquote>
</div>
<div>Se avete trovato qualcosa di peggio, segnalatemelo!</div>
</div>
<div>Giorgio</div>
</div>
</div>
</div>
</div>
</div>
</div>
]]></content:encoded>
			<wfw:commentRss>http://blog.grg-web.eu/2010/04/hello-mx/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Spamassassin &#8211; Bug di Capodanno</title>
		<link>http://blog.grg-web.eu/2010/01/spamassassin-bug-di-capodanno/</link>
		<comments>http://blog.grg-web.eu/2010/01/spamassassin-bug-di-capodanno/#comments</comments>
		<pubDate>Tue, 05 Jan 2010 17:53:36 +0000</pubDate>
		<dc:creator>Giorgio Bonfiglio</dc:creator>
				<category><![CDATA[Infrastrutture]]></category>
		<category><![CDATA[2010]]></category>
		<category><![CDATA[bug]]></category>
		<category><![CDATA[mail]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[spamassassin]]></category>

		<guid isPermaLink="false">http://blog.grg-web.eu/?p=70</guid>
		<description><![CDATA[
Stavo notando un improvviso incremento dello spam, senza notare un incremento del numero totale di mail ricevute su alcuni server che gestisco. Cosa chiaramente anomala.
Con un pò di smanettamenti ho notato che le email che venivano falciate risultavano positive per &#8220;FH_DATE_PAST_20XX&#8221;.
Con  [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: center;"><a href="http://spamassassin.apache.org/"><img class="aligncenter size-full wp-image-207" title="arrowlogo" src="http://blog.grg-web.eu/wp-content/2010/01/arrowlogo.png" alt="" width="334" height="148" /></a></p>
<p style="text-align: justify;">Stavo notando un improvviso incremento dello spam, senza notare un incremento del numero totale di mail ricevute su alcuni server che gestisco. Cosa chiaramente anomala.</p>
<p style="text-align: justify;">Con un pò di smanettamenti ho notato che le email che venivano falciate risultavano positive per &#8220;FH_DATE_PAST_20XX&#8221;.</p>
<p style="text-align: justify;">Con ulteriori smanettamenti sono arrivato qui:</p>
<p style="text-align: justify;"><a href="http://wiki.apache.org/spamassassin/Rules/FH_DATE_PAST_20XX">http://wiki.apache.org/spamassassin/Rules/FH_DATE_PAST_20XX</a></p>
<p style="text-align: justify;">In pratica il test verifica se l&#8217;header &#8220;Date:&#8221; è palesemente nel futuro. Come fa? Controlla se è tra il 2010 e il 2099. Con conseguenze catastrofiche visto che ormai siamo veramente nel 2010.</p>
<p style="text-align: justify;">Mi sembra strano che nessuno ne parli, son l&#8217;unico pistola che lo ha notato?</p>
<p style="text-align: justify;">Al momento comunque l&#8217;unica soluzione credo sia inserire nel local.cf questo:</p>
<p style="text-align: justify;"><em>score FH_DATE_PAST_20XX 0.0</em></p>
<p style="text-align: justify;">Giorgio</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.grg-web.eu/2010/01/spamassassin-bug-di-capodanno/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

