I'm also having a similar problem. I think someone is doing a dictionary spam attack to the mail server. Im using qmail and I'm very sure that it is not an open relay. Is there any way to stop dictionary spam attack?
~Mike On Mon, 16 Aug 2004 09:22:05 +0800, Jon C. Viardo <[EMAIL PROTECTED]> wrote: > I don't think so. This logs only tells you that one of your users are > sending to an unknown user(s) in the server mail.raincity.com. This is > normal and this means your server is working properly. > > ---- > > > > I'm using postfix MTA. > > Aug 14 11:58:16 mail postfix/smtp[11893]: 705DAAAD51: > to=<[EMAIL PROTECTED]>, relay=mail.raincity.com[208.186.5.150], delay=2, > status=bounced (host mail.raincity.com[208.186.5.150] said: 550 unknown > user <[EMAIL PROTECTED]> (in reply to RCPT TO command)) > Aug 14 12:08:33 mail postfix/smtp[12064]: 6C877AAD85: > to=<[EMAIL PROTECTED]>, relay=mail.raincity.com[208.186.5.150], > delay=302, status=bounced (host mail.raincity.com[208.186.5.150] said: > 550 unknown user <[EMAIL PROTECTED]> (in reply to RCPT TO command)) > Aug 14 12:10:11 mail postfix/smtp[11807]: 251FEAADB7: > to=<[EMAIL PROTECTED]>, relay=mail.raincity.com[208.186.5.150], > delay=216, status=bounced (host mail.raincity.com[208.186.5.150] said: > 550 unknown user <[EMAIL PROTECTED]> (in reply to RCPT TO command)) > Aug 14 12:10:47 mail postfix/smtp[11865]: D4F85AAD74: > to=<[EMAIL PROTECTED]>, relay=mail.raincity.com[208.186.5.150], > delay=164, status=bounced (host mail.raincity.com[208.186.5.150] said: > 550 unknown user <[EMAIL PROTECTED]> (in reply to RCPT TO command)) > > Do I have to worry about these logs? > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.736 / Virus Database: 490 - Release Date: 8/9/2004 > > --- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > Poveda Learning Centre > http://www.plc.edu.ph > > > > -- > Philippine Linux Users' Group (PLUG) Mailing List > [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) > Official Website: http://plug.linux.org.ph > Searchable Archives: http://marc.free.net.ph > .. > To leave, go to http://lists.q-linux.com/mailman/listinfo/plug > .. > Are you a Linux newbie? To join the newbie list, go to > http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie > -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
