Hi Folks,
I run a few small email lists that have some yahoo users on them - and I just started getting complaints about receiving multiple copies of messages.
In looking into it, I've found 1000s of log entries along the following lines, all from the past 5 days or so:
Jan 4 09:23:51 server1 postfix/smtp[1462]: 3BA39CC094: lost connection with mta7.am0.yahoodns.net[98.136.216.26] while sending end of data -- message may be sent more than once
It's not one of their standard anti-spam errors, and mail is arriving (multiple copies no less) - so it doesn't look like this is intentional blocking.
So... I'm wondering if anybody else is seeing this, and if anybody has a postmaster contact at yahoo (postmaster@yahoo.com, of course, auto-replies with a pointer to a useless web form).
Thanks,
Miles Fidelman
Miles, I'm seeing it here too -- same conditions (small email list), same
symptom.
But interestingly, I'm not getting that message back from Yahoo's MXes;
just a very high volume of of 'closed connection in response to end of
data' and the usual occasional minor smattering of 'temporarily deferred
due to user complaints'.
Royce Williams
I'm seeing the same thing:
Jan 4 19:13:20 mail2 postfix/error[21241]: 8C9BD1F20045: relay=none, delay=30958, delays=30835/121/0/2.1, dsn=4.4.2, status=deferred (delivery temporarily suspended: lost connection with mta5.am0.yahoodns.net[98.136.217.202] while sending end of data -- message may be sent more than once)
Jan 4 19:19:44 mail2 postfix/smtp[21813]: 3993E1F20045: relay=mta7.am0.yahoodns.net[66.196.118.33]:25, delay=98, delays=0.58/0.03/46/51, dsn=4.4.2, status=deferred (lost connection with mta7.am0.yahoodns.net[66.196.118.33] while sending end of data -- message may be sent more than once)
Jan 4 19:19:44 mail2 postfix/smtp[21813]: 3993E1F20045: relay=mta7.am0.yahoodns.net[66.196.118.33]:25, delay=98, delays=0.58/0.03/46/51, dsn=4.4.2, status=deferred (lost connection with mta7.am0.yahoodns.net[66.196.118.33] while sending end of data -- message may be sent more than once)
Based on a couple of responses saying that other people are seeing this, and I'm still getting these....
- anybody here from yahoo who might be able to respond? Or does anybody have a good contact at Yahoo's postmaster dept?
Thanks,
Miles Fidelman
Miles Fidelman wrote:
I've seen others reporting this elsewhere too, so it's clearly a problem at
Yahoo's end.
Someone on the mailops list reported that disabling TLS for
yahoodns.nethosts fixed the problem so it may be worth trying that.
Scott
It looks like yahoodns.net has a NULL MX record, so anyone who emails to a
host there will not get far.
We saw these issues Thursday and Friday:
Site yahoo.com (98.136.216.26) said after data sent: 399 TCP Read
failed (Connection was closed. after 16 seconds) 16 sec"
The next most frequent message is:
Site yahoo.com (98.138.112.32) said in response to MAIL FROM (451
4.3.2 Internal error reading data)
Frank
NPR (USA) reports that ads on Yahoo Mail were java exploits loaded on Dutch
servers infecting 27,000/hour.
Frank Whiteley
I observe successful deliveries to outgoing requests for @yahoo.com, with
no host abruptly disconnected. about 2% deferral errors such as "Site
yahoo.com (66.196.118.240) said after data sent: 451 Message temporarily
deferred - [70]"
NPR (USA) reports that ads on Yahoo Mail were java exploits loaded on Dutch
servers infecting 27,000/hour.
hmm...
http://arstechnica.com/security/2014/01/malware-attacks-thousands-of-yahoo-com-visitors-through-java-exploit/
Interesting... while this is surely a bad thing. Anyone who still has
Java installed and enabled in the web browser that is used is just
begging to get their system owned+bugged, and to a lesser extent, those
who still have Adobe reader browser plugins turned on..... it is much
safer operating to just assume it has already happened, than to wait for
the news. 