On Sunday 15 August 2004 02:16 am, Froilan wrote: > Again I'm using postfix MTA. There are lots of output when I enter the > command grep aron /var/log/maillog. Do I have to worry. > > Aug 14 12:15:54 mail postfix/qmgr[733]: E0D9EAADD0: to=<[EMAIL PROTECTED]>, > relay=none, delay=0, status=deferred (delivery temporarily suspended: > connect to a.mx.voyager.net[216.93.66.110]: Connection timed out) Aug 14 > 12:15:54 mail postfix/qmgr[733]: E0D9EAADD0: to=<[EMAIL PROTECTED]>, > relay=none, delay=0, status=deferred (delivery temporarily suspended: > connect to is.mgh.mcgill.ca[198.168.160.52]: Connection timed out) Aug 14 > 12:15:54 mail postfix/qmgr[733]: E0D9EAADD0: to=<[EMAIL PROTECTED]>, > relay=none, delay=0, status=deferred (delivery temporarily suspended: host > mk-cpfront-6.mail.uk.tiscali.com[212.74.114.8] refused to talk to me: 421 > mk-cpfrontend.uk.tiscali.com Service not available - too busy) Aug 14 > 12:15:55 mail postfix/smtp[12080]: E0D9EAADD0: to=<[EMAIL PROTECTED]>, > relay=none, delay=1, status=bounced (mail for kcnet.net loops back to > myself) Aug 14 12:15:55 mail postfix/smtp[11809]: E0D9EAADD0: > to=<[EMAIL PROTECTED]>, relay=none, delay=1, status=bounced (Host or > domain name not found. Name service error for name=iscdn.mcgill.ca type=A: > Host found but no data record of requested type) Aug 14 12:15:55 mail > postfix/smtp[12243]: E0D9EAADD0: to=<[EMAIL PROTECTED]>, relay=none, > delay=1, status=deferred (connect to culinaria.com[216.87.73.135]: > Connection refused) Aug 14 12:15:55 mail postfix/smtp[11786]: E0D9EAADD0: > to=<[EMAIL PROTECTED]>, relay=none, delay=1, status=deferred (connect to > mail.forcom.com[216.175.240.67]: Connection refused) > > Also running tail -f /var/log/maillog give so much output logs that keeps > me worrying. Is this normal?
It looks like, someone or something is sending out spam through your MTA. You should at least check: 1. if your MTA is an open relay 2. which of the hosts (which are allowed to relay) is spewing this 3. from the queue, try to check the contents of the email being sent to those addresses If you see trouble, you may also want to immediately stop postfix, and then delete all the queued outgoing spam, and then fix your MTA or ban the offending host from relaying via your MTA. HTH, -eric -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
