Face wrote:
I keep receiving this on my log and i am not sure how to stop it. is
this something i should worry about ?
Probably.
Digging out the root cause, and setting aside the more innocent ones, it
appears that you have more going on than just the odd expired
destination address and clueless sender.
Looks as if you have on your 'input' side, one or more of:
- User(s) with infected WinBoxen.
- Mailing Lists not regularly scrubbed
- a 'hole' or web-app wherein remote spammers can exploit yDO about it.
our system.
Backtrack and identify the *source* of the more problematic messages.
Those destined for non-existent .br and .fr accounts, or possible
backscatter 'bounces', for example.
You may *temporarily* wish to set 'log_selector = +all' to get all the
details so as to better ID the primary issue(s) and what to do next.
You can also add a 'log_message' or three to various acl to record extra
information or flags to simpify your log extraction for analysis.
CAVEAT: Revert to something less verbose once you have what you need, as
'+all' generates seriously massive log files.
HTH,
Bill
2011-09-06 18:43:03 1R0d9I-0002kV-7k ** zkoquh12...@yahoo.com.br
R=dnslookup T=remote_smtp: SMTP error from remote mail server after
end of data: host mta5.am0.yahoodns.net [66.94.237.64]: 554 delivery
error: dd This user doesn't have a yahoo.com.br account
(zkoquh12...@yahoo.com.br) [0] - mta1267.mail.mud.yahoo.com
2011-09-06 18:43:03 1R0d9I-0002kV-7k zkoquh12...@yahoo.com.br: error ignored
2011-09-06 18:43:04 1R0d9I-0002kV-7k Completed
2011-09-06 18:43:04 1QzdOD-0004O9-ML == uep...@yahoo.com.tw
R=dnslookup T=remote_smtp defer (-53): retry time not reached for any
host
2011-09-06 18:43:07 1R0xnn-0007Hw-H0<= ad...@aldimna.com
H=([10.0.1.9]) [10.0.1.9] P=esmtp S=749
id=4e663f8b.3060...@aldimna.com
2011-09-06 18:43:07 1R0xnn-0007Hw-H0 => admin<ad...@aldimna.com>
R=mysql_user T=local_mysql_delivery
2011-09-06 18:43:07 1R0xnn-0007Hw-H0 Completed
2011-09-06 18:43:48 1R0xoR-0007IA-MZ<= solo9...@hotmail.com
H=(col0-omc2-s11.col0.hotmail.com) [65.55.34.85] P=esmtp S=2677
id=col122-w2330c37cd0b1db67da4264da...@phx.gbl
2011-09-06 18:43:48 1R0xoR-0007IA-MZ => admin<ad...@aldimna.com>
R=mysql_user T=local_mysql_delivery
2011-09-06 18:43:48 1R0xoR-0007IA-MZ Completed
2011-09-06 18:46:14 1R0Wzb-0005JG-Cg yard.com [208.38.134.211]
Connection timed out
2011-09-06 18:46:14 1R0Wzb-0005JG-Cg == fnvigt...@yard.com R=dnslookup
T=remote_smtp defer (110): Connection timed out
2011-09-06 18:46:17 1QyWiy-0006Pu-8l SMTP error from remote mail
server after end of data: host mx1.mail.eu.yahoo.com [77.238.177.9]:
451 Message temporarily deferred - [70]
2011-09-06 18:46:19 1QyWiy-0006Pu-8l == eorsty25...@yahoo.gr
R=dnslookup T=remote_smtp defer (-46): SMTP error from remote mail
server after end of data: host mx2.mail.eu.yahoo.com [77.238.184.241]:
451 Message temporarily deferred - [70]
2011-09-06 18:46:19 1QyWiy-0006Pu-8l ** eorsty25...@yahoo.gr: retry
timeout exceeded
2011-09-06 18:46:19 1QyWiy-0006Pu-8l eorsty25...@yahoo.gr: error ignored
2011-09-06 18:46:19 1QyWiy-0006Pu-8l Completed
2011-09-06 18:46:24 1QyNZx-0000tY-Jy ** mhzemw84...@yahoo.fr
R=dnslookup T=remote_smtp: SMTP error from remote mail server after
end of data: host mx2.mail.eu.yahoo.com [77.238.184.241]: 554 delivery
error: dd This user doesn't have a yahoo.fr account
(mhzemw84...@yahoo.fr) [0] - mta1098.mail.ukl.yahoo.com
2011-09-06 18:46:24 1QyNZx-0000tY-Jy mhzemw84...@yahoo.fr: error ignored
2011-09-06 18:46:24 1QyNZx-0000tY-Jy Completed
2011-09-06 18:46:25 1QygQn-0000g6-Vl ** kbdflw39...@yahoo.com.pl
R=dnslookup T=remote_smtp: retry time not reached for any host after a
long failure period
2011-09-06 18:46:25 1QygQn-0000g6-Vl kbdflw39...@yahoo.com.pl: error ignored
2011-09-06 18:46:25 1QygQn-0000g6-Vl Completed
2011-09-06 18:46:25 1R06gL-0002a3-VV cancelled by timeout_frozen_after
2011-09-06 18:46:25 1R06gL-0002a3-VV Completed
2011-09-06 18:46:28 1Qxsj4-00048s-28 ** iebja294...@yahoo.com.br
R=dnslookup T=remote_smtp: SMTP error from remote mail server after
end of data: host mta4.am0.yahoodns.net [98.139.54.60]: 554 delivery
error: dd This user doesn't have a yahoo.com.br account
(iebja294...@yahoo.com.br) [0] - mta1290.mail.ac4.yahoo.com
2011-09-06 18:46:28 1Qxsj4-00048s-28 iebja294...@yahoo.com.br: error ignored
2011-09-06 18:46:28 1Qxsj4-00048s-28 Completed
2011-09-06 18:46:32 1QxwS9-0001ID-7V ** pfafha57...@yahoo.com.vn
R=dnslookup T=remote_smtp: SMTP error from remote mail server after
end of data: host mx1.mail.sg1.yahoo.com [124.108.116.109]: 554
delivery error: dd This user doesn't have a yahoo.com.vn account
(pfafha57...@yahoo.com.vn) [0] - mta1033.mail.sg1.yahoo.com
2011-09-06 18:46:32 1QxwS9-0001ID-7V pfafha57...@yahoo.com.vn: error ignored
2011-09-06 18:46:32 1QxwS9-0001ID-7V Completed
2011-09-06 18:46:32 1Qys5e-0000dh-3g cancelled by timeout_frozen_after
2011-09-06 18:46:32 1Qys5e-0000dh-3g Completed
2011-09-06 18:46:32 1QyRSY-000386-Sg cancelled by timeout_frozen_after
2011-09-06 18:46:32 1QyRSY-000386-Sg Completed
2011-09-06 18:46:34 1Qy8Kw-0000Q3-Vs SMTP error from remote mail
server after end of data: host mta4.am0.yahoodns.net [98.139.54.60]:
451 Message temporarily deferred - [70]
2011-09-06 18:46:37 1Qy8Kw-0000Q3-Vs ** rtszu766...@yahoo.com.br
R=dnslookup T=remote_smtp: SMTP error from remote mail server after
end of data: host mta4.am0.yahoodns.net [67.195.168.230]: 554 delivery
error: dd This user doesn't have a yahoo.com.br account
(rtszu766...@yahoo.com.br) [0] - mta1068.mail.ac4.yahoo.com
2011-09-06 18:46:37 1Qy8Kw-0000Q3-Vs rtszu766...@yahoo.com.br: error ignored
2011-09-06 18:46:37 1Qy8Kw-0000Q3-Vs Completed
2011-09-06 18:46:37 1QyTTQ-0002Hf-0E cancelled by timeout_frozen_after
2011-09-06 18:46:37 1QyTTQ-0002Hf-0E Completed
2011-09-06 18:46:37 1QyrTK-00084o-Jo cancelled by timeout_frozen_after
2011-09-06 18:46:37 1QyrTK-00084o-Jo Completed
2011-09-06 18:46:37 1QyAx6-0001i1-JB cancelled by timeout_frozen_after
2011-09-06 18:46:37 1QyAx6-0001i1-JB Completed
2011-09-06 18:46:37 1QyIhx-0003dZ-LB cancelled by timeout_frozen_after
2011-09-06 18:46:37 1QyIhx-0003dZ-LB Completed
2011-09-06 18:46:37 1QxfUw-0002ov-5i cancelled by timeout_frozen_after
2011-09-06 18:46:37 1QxfUw-0002ov-5i Completed
2011-09-06 18:46:37 1QyUp1-0007QD-2u cancelled by timeout_frozen_after
2011-09-06 18:46:37 1QyUp1-0007QD-2u Completed
2011-09-06 18:46:37 1QyUKN-0005hG-Gs cancelled by timeout_frozen_after
2011-09-06 18:46:37 1QyUKN-0005hG-Gs Completed
2011-09-06 18:46:37 1QyT3x-0001yM-35 cancelled by timeout_frozen_after
2011-09-06 18:46:37 1QyT3x-0001yM-35 Completed
2011-09-06 18:46:37 1QyUiW-000763-Nd cancelled by timeout_frozen_after
2011-09-06 18:46:37 1QyUiW-000763-Nd Completed
2011-09-06 18:46:40 1R0nis-0003cf-CY ** lpdeak...@yahoo.com
R=dnslookup T=remote_smtp: SMTP error from remote mail server after
end of data: host l.mx.mail.yahoo.com [74.6.136.244]: 554 delivery
error: dd This user doesn't have a yahoo.com account
(lpdeak...@yahoo.com) [0] - mta1254.mail.sk1.yahoo.com
2011-09-06 18:46:40 1R0nis-0003cf-CY lpdeak...@yahoo.com: error ignored
2011-09-06 18:46:40 1R0nis-0003cf-CY Completed
2011-09-06 18:46:40 1QylOm-0007VX-S5 cancelled by timeout_frozen_after
2011-09-06 18:46:40 1QylOm-0007VX-S5 Completed
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 == happyaprilw...@yahoo.com.tw
R=dnslookup T=remote_smtp defer (-46): SMTP error from remote mail
server after end of data: host mx1.mail.tw.yahoo.com
[203.188.197.119]: 451 Message temporarily deferred - [70]
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 == abcdefgh...@yahoo.com.tw
R=dnslookup T=remote_smtp defer (-46): SMTP error from remote mail
server after end of data: host mx1.mail.tw.yahoo.com
[203.188.197.119]: 451 Message temporarily deferred - [70]
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 == iorivenom...@yahoo.com.tw
R=dnslookup T=remote_smtp defer (-46): SMTP error from remote mail
server after end of data: host mx1.mail.tw.yahoo.com
[203.188.197.119]: 451 Message temporarily deferred - [70]
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 == andy89723...@yahoo.com.tw
R=dnslookup T=remote_smtp defer (-46): SMTP error from remote mail
server after end of data: host mx1.mail.tw.yahoo.com
[203.188.197.119]: 451 Message temporarily deferred - [70]
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 == ada...@yahoo.com.tw
R=dnslookup T=remote_smtp defer (-46): SMTP error from remote mail
server after end of data: host mx1.mail.tw.yahoo.com
[203.188.197.119]: 451 Message temporarily deferred - [70]
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 == alis5...@yahoo.com.tw
R=dnslookup T=remote_smtp defer (-46): SMTP error from remote mail
server after end of data: host mx1.mail.tw.yahoo.com
[203.188.197.119]: 451 Message temporarily deferred - [70]
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 == nkb20...@yahoo.com.tw
R=dnslookup T=remote_smtp defer (-46): SMTP error from remote mail
server after end of data: host mx1.mail.tw.yahoo.com
[203.188.197.119]: 451 Message temporarily deferred - [70]
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 == chin630...@yahoo.com.tw
R=dnslookup T=remote_smtp defer (-46): SMTP error from remote mail
server after end of data: host mx1.mail.tw.yahoo.com
[203.188.197.119]: 451 Message temporarily deferred - [70]
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 == candice1...@yahoo.com.tw
R=dnslookup T=remote_smtp defer (-46): SMTP error from remote mail
server after end of data: host mx1.mail.tw.yahoo.com
[203.188.197.119]: 451 Message temporarily deferred - [70]
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 ** candice1...@yahoo.com.tw:
retry timeout exceeded
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 ** chin630...@yahoo.com.tw: retry
timeout exceeded
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 ** nkb20...@yahoo.com.tw: retry
timeout exceeded
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 ** alis5...@yahoo.com.tw: retry
timeout exceeded
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 ** ada...@yahoo.com.tw: retry
timeout exceeded
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 ** andy89723...@yahoo.com.tw:
retry timeout exceeded
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 ** iorivenom...@yahoo.com.tw:
retry timeout exceeded
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 ** abcdefgh...@yahoo.com.tw:
retry timeout exceeded
2011-09-06 18:46:43 1Qxx63-0002DQ-N2 ** happyaprilw...@yahoo.com.tw:
retry timeout exceeded
2011-09-06 18:46:44 1R0xrH-0007JT-Uh<=<> R=1Qxx63-0002DQ-N2 U=exim
P=local S=4818
2011-09-06 18:46:44 1Qxx63-0002DQ-N2 Completed
2011-09-06 18:46:46 1R0xrH-0007JT-Uh ** lgayix89...@yahoo.fr
R=dnslookup T=remote_smtp: SMTP error from remote mail server after
end of data: host mx1.mail.eu.yahoo.com [77.238.177.9]: 554 delivery
error: dd This user doesn't have a yahoo.fr account
(lgayix89...@yahoo.fr) [0] - mta1062.mail.ird.yahoo.com
2011-09-06 18:46:46 1R0xrH-0007JT-Uh Frozen (delivery error message)
2011-09-06 18:46:46 1R0oIW-0004Vn-UG Unfrozen by errmsg timer
2011-09-06 18:46:46 1R0oIW-0004Vn-UG ** root@empty: Unrouteable address
2011-09-06 18:46:46 1R0oIW-0004Vn-UG root@empty: error ignored
2011-09-06 18:46:46 1R0oIW-0004Vn-UG Completed
2011-09-06 18:46:46 1Qy0nY-0006jk-CX cancelled by timeout_frozen_after
2011-09-06 18:46:46 1Qy0nY-0006jk-CX Completed
2011-09-06 18:46:51 1QxoV3-0006j9-Qw => huaawei0...@163.com
R=dnslookup T=remote_smtp H=163mx02.mxmail.netease.com
[123.125.50.139]
2011-09-06 18:46:51 1QxoV3-0006j9-Qw Completed
2011-09-06 18:47:01 queue run: process 28128 crashed with signal 15
while delivering 1QyTib-0003fE-De
2011-09-06 18:47:01 1QyFmo-0008Cq-0i cancelled by timeout_frozen_after
2011-09-06 18:47:01 1QyFmo-0008Cq-0i Completed
--
韓家標
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
