RE: [IMail Forum] Wierd entries in sys.log

[Kevin Brennan]

They are log entries one after another.    The first one is from the net, the second one is a postmaster trying to deliver back to the address that came in the first one.  I think   I get one or two of these a day out of about 5000 or so messages.   I was wondering if it was a new way to hack??   Kevin     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff (Lists) Sent: Monday, November 01, 2004 4:46 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Wierd entries in sys.log   You have posted logs for 2 different messages. The one ending in feb completes fully. The one ending in fed appears to be a postmaster message generated by Imail. Either that or a mis-configured firewall some where.   John Tolmachoff Engineer/Consultant/Owner eServices For You   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin Brennan Sent: Monday, November 01, 2004 4:32 PM To: [EMAIL PROTECTED] Subject: [IMail Forum] Wierd entries in sys.log   I have been reading through the list, I would like to see if anyone can tell me why once in a while this happens.   I enclosed a part of the log to show the behavior.     20041031 011726 127.0.0.1       SMTPD (9f96003900328feb) [66.14.210.201] connect 209.250.15.73 port 1345 20041031 011726 127.0.0.1       SMTPD (9f96003900328feb) [209.250.15.73] HELO 209-250-15-73.convergentaz.net 20041031 011727 127.0.0.1       SMTPD (9f96003900328feb) [209.250.15.73] MAIL FROM: <[EMAIL PROTECTED]> 20041031 011728 127.0.0.1       SMTPD (9f96003900328feb) [209.250.15.73] RCPT TO: <[EMAIL PROTECTED]> 20041031 011730 127.0.0.1       SMTPD (9f96003900328feb) [209.250.15.73] f:\IMail\spool\D9f96003900328feb.SMD 1676 20041031 011730 127.0.0.1       SMTPD (9f96003900328feb) performing antispam checks 20041031 011734 127.0.0.1       SMTPD (9f9e003a00328fed) [127.0.0.2] connect 127.0.0.2 port 3987 20041031 011734 127.0.0.1       SMTPD (9f9e003a00328fed) [127.0.0.2] HELO net.com 20041031 011734 127.0.0.1       SMTPD (9f9e003a00328fed) [127.0.0.2] MAIL FROM: <[EMAIL PROTECTED]> 20041031 011734 127.0.0.1       SMTPD (9f9e003a00328fed) [127.0.0.2] RCPT TO: <[EMAIL PROTECTED]> 20041031 011734 127.0.0.1       SMTPD (9f9e003a00328fed) [127.0.0.2] ERR net.com invalid user <[EMAIL PROTECTED] 20041031 011734 127.0.0.1       SMTP (9f96003900328feb) processing f:\IMail\spool\Q9f96003900328feb.SMD 20041031 011734 127.0.0.1       SMTP (9f96003900328feb) Inbound X-IMail-Rule: S~X-IMail:[EMAIL PROTECTED] Data- X-IMAIL-SPAM-STATISTICAL  X-IM 20041031 011734 127.0.0.1       SMTP (9f96003900328feb) ldeliver net.com spam-main (1) [EMAIL PROTECTED] 1822 20041031 011734 127.0.0.1       SMTP (9f96003900328feb) finished f:\IMail\spool\Q9f96003900328feb.SMD status=1