Re: bug or bad configuration??

[Matti Aarnio <mea@nic.funet.fi>]

On Wed, May 30, 2001 at 03:01:54PM +0200, Rocio Alfonso Pita wrote:
> Hello,
> 
>   I have a problem with my relay configuration. Sometimes an IP is
> denied, and after the same IP is accepted. 
> 
>   I don't have that IP in my smtp-policy.relay, hence it should deny
> always. Where is the error?

  In user expectations ?

>   Thanks in advantage.
> 
>   Regards,
>     rozio
> 
> Aditional information
> *********************
> 3HLs00629#      connection from [212.163.225.137] ipcnt 1 childs 1 ident: TIMEDOUT
> 3HLs00629w      220 ESMTP+IDENT mail server ready.
> 3HLs00629#      remote from [212.163.225.137]:772
> 3HLs00629r      EHLO ines
> 3HLs00629w      250-ns1.universalsupport.com Hello ines
> 3HLs00629w      250-SIZE 10000000
> 3HLs00629w      250-8BITMIME
> 3HLs00629w      250-PIPELINING
> 3HLs00629w      250-CHUNKING
> 3HLs00629w      250-ENHANCEDSTATUSCODES
> 3HLs00629w      250-DSN
> 3HLs00629w      250-X-RCPTLIMIT 10000
> 3HLs00629w      250-AUTH=LOGIN
> 3HLs00629w      250-AUTH LOGIN
> 3HLs00629w      250-ETRN
> 3HLs00629w      250 HELP
> 3HLs00629r      AUTH LOGIN
> 3HLs00629w      334 VXNlcm5hbWU6
> 3HLs00629r      ZWlzaWliYW5leg==
> 3HLs00629w      334 UGFzc3dvcmQ6
> 3HLs00629r      **base64-password**
> 3HLs00629w      235 Authentication successful.

	This user has authenticated to the system -- "usuario" is,
	I think "user" in some latin family language ?

	My default setup is such that the plaintext password login
	(the only thing that there is) can only happen underneath the
	secrecy cloak of SSL.  BASE64 encoding is *not* encryption!

> 3HLs00629r      MAIL FROM: <usuario@essential-is.com>
> 3HLs00629w      250 2.1.0 Sender syntax Ok
> 3HLs00629r      RCPT TO: <usuario@wanadoo.es>
> 3HLs00629w      250 2.1.5 Recipient address syntax Ok; rcpt=<usuario@wanadoo.es>
> 3HLs00629r      DATA
> 3HLs00629w      354 Start mail input; end with <CRLF>.<CRLF>
> 3HLs00629w      250 2.6.0 S252495AbRE3HLu message accepted
> 3HLs00629#      S252495AbRE3HLu: 2141 bytes
> 3HLs00629r      QUIT
> .
> .
> .
> 3HtU01300#      connection from [212.163.225.137] ipcnt 1 childs 2
> ident: TIMEDOUT
> 3HtU01300w      220 ESMTP+IDENT mail server ready.
> 3HtU01300#      remote from [212.163.225.137]:63757
> 3HtU01300r      HELO bert
> 3HtU01300w      250 nf1.universalsupport.com Hello bert


	No login happens here.

> 3HtU01300r      MAIL FROM: <usuario@essential-is.com>
> 3HtU01300w      250 2.1.0 Sender syntax Ok
> 3HtU01300r      RCPT TO: <usuario@wanadoo.es>
> 3HtU01300#      -- policy result=-3, msg: <NONE!>
> 3HtU01300w      550 5.7.1 This target address is not our MX service client: <usuario@wanadoo.es>
> 3HtU01300r      QUIT
> 3HtU01300w      221 2.0.0 ns1.universalsupport.com Out
> -- 


-- 
/Matti Aarnio	<mea@nic.funet.fi>