Slashdot Log In
Admins Accuse Microsoft of Hotmail Cap
Posted by
samzenpus
on Wed Oct 10, 2007 06:05 PM
from the who-needs-more-than-10-friends dept.
from the who-needs-more-than-10-friends dept.
kurmudgeon writes "The Register is fielding reader tips that Hotmail has placed Draconian limits on the number of Hotmail recipients who can receive an email. The first 10 Hotmail addresses included in a mass email go through just fine, according to these reports. But any additional addresses are returned to sender with a message that reads: "552 Too many recipients." (Microsoft denies it has placed any such restriction on the number of senders.) This would appear to be a violation of RFC 2821, which states: "Rejection of messages (for excessive recipients) with fewer than 100 RCPT commands is a violation of this specification."
Related Stories
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
And the problem is...? (Score:5, Interesting)
Let's look at that phrasing: "Rejection of messages (for excessive recipients) with fewer than 100 RCPT commands is a violation of this specification." (emphasis added).
Are they rejecting messages, or are they rejecting recipients?
According to this, they're rejecting recipients with an obvious "try this again" code. Really that should be 452, not 552, but that same RFC 2821 says that senders should treat a 552 as temporary:
So whatever sending server runs into these limits should retransmit the message to the remaining recipients on the next queue run. Okay, it'll only reach 10 recipients at a time, which is annoying. It shouldn't be kicking back the error to the client.
Really, assuming Microsoft has actually put this limit in place, the only thing I can see that's wrong, from a practical standpoint, is using the outdated 552 code instead of the more specific 452 -- but that same RFC people are waving around says that their servers should treat it as temporary anyway.
Am I missing something?
Re: (Score:2, Insightful)
Re:And the problem is...? (Score:4, Informative)
The proper reaction of a sending server to a temporary error is to try again. Per that same RFC, the server should be treating '552 too many recipients' as a temporary error.
Yahoo does the same thing at 30 recipients, though they issue the more proper 452 error code. The first 30 recipients at Yahoo get the message, then the sending server retransmits to the remaining addresses.
Parent
Re:And the problem is...? (Score:4, Interesting)
It's one thing to have anti-spam and anti-abuse mechanisms in place, it's another to deliberately break basic functionality in direct violation of the standards that make email work. There are MUCH better ways of handling situations where you want to rate limit inbound mail that are fully compliant with the RFCs, that allow all valid mail to get through.
It simply amazes me how many IDIOTS are running servers at large ISP's / sites. It is well known by most competent email admins that hotmail is totally broken and unreliable. Anyone still using hotmail for everyday use should have their head examined.
Parent
Re:And the problem is...? (Score:5, Interesting)
If a client actually stops trying to deliver based on a 552 error, then it, too, is violating the standard, in a way that actually prevents delivery. I consider that a more serious violation.
Parent
Re: (Score:3, Insightful)
Aren't 55X errors supposed to be permanent, while 45X errors are temporary ?
Why would the sender keep the message on the queue after a permanent error ?
Re:And the problem is...? (Score:4, Informative)
Parent
Re:And the problem is...? (Score:4, Interesting)
Only if the sending SMTP server is broken. SMTP has two types of return codes: permanent failures and temporary failures. A permanent failure causes the message to bounce to the sender. A temporary failure causes the message to be queued and resent. Upon resending, only recipients for whom an error was generated are retried. Thus, if this error occurs after ten recipients, the remainder won't get the message in the first pass, but the next ten will get it when the sending server retries (usually after an hour, IIRC). This should continue until the recipient list is exhausted. Even this assumes that the sending SMTP server is extremely dumb and doesn't really understand anything about this error code at all beyond that it is a temporary error.... If it actually understands the code, it should try resending to additional recipients immediately, and divide the message into smaller batches, in which case it would delay delivery by a few minutes at most.
In theory, in some extreme cases, the recipient might never get the message. If it retries once an hour for a week (fairly typical), that would effectively cap the number of HoTMaiL recipients of a single message at 10 * 24 * 7 = 1680 recipients. Of course, a proper sending SMTP server should already be able to split messages into batches of a hundred or less because a limit of 100+ is considered acceptable behavior by the receiving server. Thus, in effect, because 1680 is larger than 100, short of a very long term net outage after the initial connection attempt, all the recipients should receive the message in every case. If this does not occur, the sending SMTP server is broken.
This is, of course, just my opinion.
Parent
Re: (Score:2, Informative)
"""
recipients buffer
The minimum total number of recipients that must be buffered is
100 recipients. Rejection of messages (for excessive recipients)
with fewer than 100 RCPT commands is a violation of this
specification.
"""
which is only a couple of paragraphs above what you quoted.
You're also m
Re: (Score:2)
I think the important part is the longevity that this filter is in place. Does anyone have any first documented cases with a nice time stamp?
I am not one to defend MS, but sometimes shit happens, if they are providing a correct code to identify a temporary action, then the clients should react appropriately with a next queue. However, I don't know how I would feel if they did this on purpose, logged were all those 522s
Re: (Score:2, Informative)
4xx rejections are temporary, "try again later."
Too many? (Score:3, Funny)
"552 Too many first posts."
E-mail is dead for mass communication (Score:2)
Re:E-mail is dead for mass communication (Score:5, Interesting)
All MS is doing is cranking up bandwidth costs now. Instead of one copy being sent to all 68 subscribers on the server, my listserv now has to send them 68 copies of the same damned thing. Incredibly inefficient, but the subscribers want the email, so that's what'll happen.
Parent
Re: (Score:2)
When my wife was corresponding secretary of an organization with a mailing list in the low hundreds, I had to send out the e-mails. I experimented and found that e-mails with 8 recipients would go
The bandwidth difference is negligible (Score:2)
So yeah, it's annoying in theory, but that just means you need a
Re: (Score:3, Interesting)
At UMBC [umbc.edu], almost all student organizations, many classes, club teams, etc. etc. all use a mailing list system powered by Sympa [sympa.org] to communicate. It's way more convenient than logging into our blackboard site, browsing to the class, finding the discussions forums, and finding the right thread in the mangled excuse for organization.
With the mailing list, all I have to do is check my email. Email is easier to centralize to the individual
Re: (Score:3, Insightful)
Re: (Score:3, Insightful)
Because web forums suck.
Re: (Score:2)
1) How does RSS save bandwidth? The images are loaded when each user checks their newsletter? Assuming the newsletter is legit, then te read rate will be high, and the bandwidth gets used anyway.
2) The newsletters I persona
Hotmail is unreliable anyway (Score:5, Interesting)
Our (100% legitimate, double opt-in) mailing list gets a few Hotmail addresses added to it every now and then. We frequently get people complaining about missing mails and so on. Invariably, it's because of something silly, usually spam filtering that has been set to be so ludicrously aggressive that practically anything not white-listed (i.e., nothing on a new account) gets through.
We have now reached the point where we consider Hotmail an irrelevance. We don't even advise complainants to use another mail client any more, we just ignore them. The list is not run for profit, and the effort of supporting Microsoft's not-playing-ball freebie mail system just isn't worth it for what is basically a hobby set-up run for the benefit of our community.
Re: (Score:2, Informative)
I'm shocked (Score:2, Funny)
*incoherent wheezing and laughter*
What's the bid deal? (Score:4, Funny)
Re:What's the bid deal? (Score:4, Funny)
Parent
People still use hotmail? (Score:3, Informative)
You gotta pay up! (Score:2, Interesting)
Of course, it's not the exact, same thing, but the similarity between the two situations is spooky, to say th
Re: (Score:2)
Dont worry! (Score:5, Funny)
Benefits include :
1) Spam whomever you want, bypassing all spam filters!
2) Send e-mails to more than 10 recipients (Also called the "I run a mailing list you fucktard" option)
3) Free "Upgrade to Vista (Please)" coupon.
Microsoft doesn't deny it (Score:2, Informative)
Oh NOES! (Score:3, Funny)
an RFC is not automatically a 'Standard' (Score:2)
Simple Mail Transfer Protocol (SMTP) is the de facto standard for e-mail transmissions across the Internet. Formally SMTP is defined in RFC 821 (STD 10) as amended by RFC 1123 (STD 3) chapter 5. The protocol used today is also known as ESMTP and defined in RFC 2821.
The only thing the Sender sould care about is the first digit of the response code, per RFC 1123:
Whenever possible, a sender-SMTP SHOULD test only the first digit of the reply code, as specified in Appendix E of RFC-821.
an
I'm in violation too... (Score:4, Insightful)
And WHAT excuse do our fanbois here have for this (Score:2)
RFCs are not laws (Score:3, Insightful)
I love the way the OP makes this sound like a serious criminal violation. Microsoft (or you, or me) is free to violate RFC 2821 till the cows come home. Whether doing so is the best way to handle whatever problem they're trying to address is another matter, but they're not drowning puppies or breaking laws, they're violating voluntary standards, which is not exactly a newsworthy activity for Microsoft.
Re: (Score:3, Informative)
None of the customer mail servers I look after will accept more than about 50 recipients per message from internal users, let alone external users. Otherwise, I get too many calls from customers complaining that their internet access is slow, only to find out that t
Re:RFCs are not laws (Score:4, Insightful)
I love the way you just make shit up. All I got from the summary was that they are violating the RFC, I can't imagine what kind of synaptic misfire would lead anyone to think "criminal" when they read that.
Is overzealous MS reverse-bashing the in thing now?
Parent
I'm not TERRIBLY pro-MS, but... (Score:5, Insightful)
Granted, security through obscurity isn't really effective, but why should they bother telling spammers how small to make their batches in order to get things through? Make the bastards work a little bit.
Wow, I've gotten cynical.
Re:I'm not TERRIBLY pro-MS, but... (Score:4, Interesting)
I would be pissed off if i were subscribed to something and I were the 11th hotmail user on their list.
Parent
Hotmail is just one sign (Score:3, Insightful)
Because of spam, you can assume only that if you send an email and do not get a response that it never got through. If the only contact you have with a customer is an email address, you aren't going to get anywhere. Mail can be blocked at any point between the sender and the recipient without the knowledge or consent of the recipient - telling the recipient that they need to unblock your email is pointless as they may have nothing to do with the blocking.
Face it, email is suitable for sending threatening letters to georgebush@whitehouse.gov, love notes to your girlfriend and jokes to others in the office. And that's about it.
Meh.... (Score:2)
It seems a bit silly for Microsoft to have such a strict policy and then lie about it.
RFC 2821 is not (yet) a standard (Score:5, Informative)
Re: (Score:3, Interesting)
Sometimes even earlier denial is good (Score:3, Informative)
Unfortunately spam filtering has became so complex that more often than not one there is no one-size-fits-them-all configuration. But this means that the same message might be acceptable to the configuration settings of user A but not to the settings of user B. When now a mail sender tries to send a message to A and B, it will be necessary to deny recipient B due to the differing config (at least for filters which are based on content and thus can not be run before the recipient was accepted and the message sent).
Yes, this breaks a proposed standard. But so do a lot of other spam filtering techniques like RBL, SPF and Greylisting. Thanks to the spammers we have broken SMTP quite some while ago and one is to wonder why internet mail is still quite reliable. I predict it can only go downhill from here.
You think MS is bad? Try Yahoo! (Score:4, Informative)
When I contacted Yahoo, I was referred to a broken web form that supposedly would direct me to a place where I could whitelist my domain, or at least make it less spammy-looking to Yahoo. Upon further attempts to reach them, I only received automated responses, but no answers to my questions.
I am not the only one who has had this problem sending e-mail to Yahoo accounts. Ironically, just Google for all the discussions on how Yahoo doesn't care.
Sending e-mail to GMail accounts works just fine for me. None of my messages show up in the spam folder. This is an indicator that the problem lies with Yahoo, and not with my domain.
"Admins Accuse Microsoft of Hotmail Crap" (Score:3, Funny)
The obligatory checklist (Score:3, Funny)
(x) technical ( ) legislative ( ) market-based ( ) vigilante
approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)
( ) Spammers can easily use it to harvest email addresses
(x) Mailing lists and other legitimate email uses would be affected
( ) No one will be able to find the guy or collect the money
( ) It is defenseless against brute force attacks
(x) It will stop spam for two weeks and then we'll be stuck with it
(x) Users of email will not put up with it
( ) Microsoft will not put up with it
( ) The police will not put up with it
( ) Requires too much cooperation from spammers
( ) Requires immediate total cooperation from everybody at once
( ) Many email users cannot afford to lose business or alienate potential employers
( ) Spammers don't care about invalid addresses in their lists
( ) Anyone could anonymously destroy anyone else's career or business
Specifically, your plan fails to account for
( ) Laws expressly prohibiting it
( ) Lack of centrally controlling authority for email
( ) Open relays in foreign countries
( ) Ease of searching tiny alphanumeric address space of all email addresses
( ) Asshats
( ) Jurisdictional problems
( ) Unpopularity of weird new taxes
( ) Public reluctance to accept weird new forms of money
(x) Huge existing software investment in SMTP
( ) Susceptibility of protocols other than SMTP to attack
( ) Willingness of users to install OS patches received by email
(x) Armies of worm riddled broadband-connected Windows boxes
( ) Eternal arms race involved in all filtering approaches
( ) Extreme profitability of spam
( ) Joe jobs and/or identity theft
( ) Technically illiterate politicians
( ) Extreme stupidity on the part of people who do business with spammers
( ) Extreme stupidity on the part of people who do business with Microsoft
( ) Extreme stupidity on the part of people who do business with Yahoo
( ) Dishonesty on the part of spammers themselves
( ) Bandwidth costs that are unaffected by client filtering
( ) Outlook
and the following philosophical objections may also apply:
(x) Ideas similar to yours are easy to come up with, yet none have ever been shown practical
( ) Any scheme based on opt-out is unacceptable
( ) SMTP headers should not be the subject of legislation
( ) Blacklists suck
( ) Whitelists suck
( ) We should be able to talk about Viagra without being censored
( ) Countermeasures should not involve wire fraud or credit card fraud
( ) Countermeasures should not involve sabotage of public networks
( ) Countermeasures must work if phased in gradually
( ) Sending email should be free
( ) Why should we have to trust you and your servers?
( ) Incompatiblity with open source or open source licenses
( ) Feel-good measures do nothing to solve the problem
( ) Temporary/one-time email addresses are cumbersome
( ) I don't want the government reading my email
( ) Killing them that way is not slow and painful enough
Furthermore, this is what I think about you:
( ) Sorry dude, but I don't think it would work.
(x) This is a stupid idea, and you're a stupid company for suggesting it.
( ) Nice try, assh0le! I'm going to find out where you live and burn your house down!
Re: (Score:2)
Most people don't follow that standard (Score:3)
It does sound to me like the too-many-recipients failure should be a 452 rather than 552, but other people have commented that mail senders are supposed to know how to deal
Re:Hotmail has many worse problems than this one! (Score:5, Interesting)
me: why are you accepting my email with code 250 OK, but never delivering it?
them: we can't talk to you until you submit all the forms at postmaster.hotmail.com
me: submits the forms, which are clearly geared toward businesses (my "site" doesn't have a "privacy policy" or an "opt out form" because I don't SELL ANYTHING).
them: we can't talk to you until you sign up for our email tracking service to analyze your traffic
me: signs up. My server doesn't generate enough traffic for them to even log.
them: you need an SPF record
me: installs an SPF record
them: your SPF record is wrong. RFC blah blah states...
me: IT WAS GENERATED BY YOUR ONLINE TOOL!! And if you want to quote RFCs at me how about the one where if your server accepts email, you're guaranteeing not to drop it for frivolous reasons (RFC 2821, sec. 6.1)?
them: our reasons are not frivolous, but we won't tell you anything.
me: like how your servers drop email sent from thunderbird but let the same messages through when sent from outlook express?
them: we don't filter based on header information
Parent