Re: Forcing PIX workarounds?

2 msg	SQL query as alias
3 msg	Mailfrom restriction and SASL clients
4 msg	How to inform outside users that domain soon wi...
31 msg	ASSP and NOOP
9 msg	Double restrictions for SMTP Authen question ?
5 msg	Resend 'virus' mails
3 msg	message_size_limit exceptions
53 msg	about greylist.pl and alternatives
7 msg	failing to send a large mail
1 msg	Re: Another weird cert question
2 msg	Restrict sending to one address from one IP?

Forcing PIX workarounds?
\ Mark Martinec (29 May 2007)
. \ (Wietse Venema) (29 May 2007)
. . \ Mark Martinec (29 May 2007)
. . . \ (Wietse Venema) (29 May 2007)
. . . \ Victor Duchovni (29 May 2007)
. . . . \ Mark Martinec (29 May 2007)

4 msg	header checks are not working
9 msg	recipient_delimiter
3 msg	Documenting alias expansion in mails
5 msg	Domain Change Notification
4 msg	How to do a defer_if_permit with a SMTP code 451?
4 msg	virtual: mbox fine, maildir generates 'fatal: g...
5 msg	Multiple relays and rate control with anvil
19 msg	550

Subject:	Re: Forcing PIX workarounds?
Group:	Postfix-users
From:	Mark Martinec
Date:	29 May 2007

Wietse writes:
> They may very well require that ".<CR><LF>" be sent separately,
> instead of concatenated to the message content.
> In that case delay_dotcrlf would do the job.

My thought as well, but unfortunately it does not help
(or fortunately) even if I slowly send a small mail manually
through telnet, taking care to send a .CRLF alone in a packet.
The IP stack keeps acknowledging further packets, and nothing
else happens. The MailEnable Service v1.96 on 85.25.147.47
is really borked.

> This would not surprise me, considering that older MailEnable
> versions could be crashed by sending a HELO command with a bogus
> hostname that starts with a null character.
> http://www.juniper.net/security/auto/vulnerabilities/vuln3361.html

Interesting. The version fits.

Victor writes:
> You could try sending to this destination via an SMTP proxy (say a
> modified amavisd-new :-) that implements the necessary delays, and if
> that works, we can better motivate a new Postfix feature...

Thanks:) It seems a workaround will not be needed,
no amount of good will is able to push a mail across.
(mail has been stuck in our queue for 5 days;
also tried to send manually from another machine from
a different network with no firewall, to no avail).

Mark