RE: [IMail Forum] Wierd entries in sys.log

Mon, 01 Nov 2004 17:17:22 -0800

No, just part of normal e-mail server follies. (Oops, meant work.)

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Brennan
Sent: Monday, November 01, 2004 4:51 PM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] Wierd entries in sys.log

 

They are log entries one after another. 

 

The first one is from the net, the second one is a postmaster trying to deliver back to the address that came in the first one.  I think

 

I get one or two of these a day out of about 5000 or so messages.

 

I was wondering if it was a new way to hack??

 

Kevin

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent: Monday, November 01, 2004 4:46 PM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] Wierd entries in sys.log

 

You have posted logs for 2 different messages. The one ending in feb completes fully. The one ending in fed appears to be a postmaster message generated by Imail. Either that or a mis-configured firewall some where.

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Brennan
Sent: Monday, November 01, 2004 4:32 PM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] Wierd entries in sys.log

 

I have been reading through the list, I would like to see if anyone can tell me why once in a while this happens.

 

I enclosed a part of the log to show the behavior.

 

 

20041031 011726 127.0.0.1       SMTPD (9f96003900328feb) [66.14.210.201] connect 209.250.15.73 port 1345

20041031 011726 127.0.0.1       SMTPD (9f96003900328feb) [209.250.15.73] HELO 209-250-15-73.convergentaz.net

20041031 011727 127.0.0.1       SMTPD (9f96003900328feb) [209.250.15.73] MAIL FROM: <[EMAIL PROTECTED]>

20041031 011728 127.0.0.1       SMTPD (9f96003900328feb) [209.250.15.73] RCPT TO: <[EMAIL PROTECTED]>

20041031 011730 127.0.0.1       SMTPD (9f96003900328feb) [209.250.15.73] f:\IMail\spool\D9f96003900328feb.SMD 1676

20041031 011730 127.0.0.1       SMTPD (9f96003900328feb) performing antispam checks

20041031 011734 127.0.0.1       SMTPD (9f9e003a00328fed) [127.0.0.2] connect 127.0.0.2 port 3987

20041031 011734 127.0.0.1       SMTPD (9f9e003a00328fed) [127.0.0.2] HELO net.com

20041031 011734 127.0.0.1       SMTPD (9f9e003a00328fed) [127.0.0.2] MAIL FROM: <[EMAIL PROTECTED]>

20041031 011734 127.0.0.1       SMTPD (9f9e003a00328fed) [127.0.0.2] RCPT TO: <[EMAIL PROTECTED]>

20041031 011734 127.0.0.1       SMTPD (9f9e003a00328fed) [127.0.0.2] ERR net.com invalid user <[EMAIL PROTECTED]

20041031 011734 127.0.0.1       SMTP (9f96003900328feb) processing f:\IMail\spool\Q9f96003900328feb.SMD

20041031 011734 127.0.0.1       SMTP (9f96003900328feb) Inbound X-IMail-Rule: S~X-IMail:[EMAIL PROTECTED] Data- X-IMAIL-SPAM-STATISTICAL  X-IM

20041031 011734 127.0.0.1       SMTP (9f96003900328feb) ldeliver net.com spam-main (1) [EMAIL PROTECTED] 1822

20041031 011734 127.0.0.1       SMTP (9f96003900328feb) finished f:\IMail\spool\Q9f96003900328feb.SMD status=1

 

 

 

 

Reply via email to