* Ralf Hildebrandt <ralf.hildebra...@charite.de>:
> Today I found this in my log:
> Jan 12 22:39:39 mail postfix/postscreen[17030]: COMMAND PIPELINING from
> [216.46.18.51]:58366 after QUIT
>
> So I wondered -- "after QUIT?" and had a look at the client:
>
> mail:~# host 216.46.18.51
> 51.18.46.216.in-addr.arpa is an alias for 51.32/27.18.46.216.in-addr.arpa.
> 51.32/27.18.46.216.in-addr.arpa domain name pointer mail51.parafat.org.
>
> mail:~# telnet mail51.parafat.org. 25
> Trying 216.46.27.98...
> Connected to parafat.org.
> Escape character is '^]'.
> 220 mail98.parafat.org ESMTP Postfix (Ubuntu)
> QUIT
> 221 2.0.0 Bye
> Connection closed by foreign host.
>
> Would a Postfix instance trigger postscreen of another instance?
Some stats (I snipped some garbage):
mail:~# awk '/postfix\/postscreen.*COMMAND PIPELINING/ {print $11}'
/var/log/mail.log | sort | uniq -c | sort -n
2 XXXXX
3 RCPT
6 MAIL
16 EHLO
29 HELO
151 QUIT
Jan 12 18:59:40 mail postfix/postscreen[17030]: COMMAND PIPELINING from
[41.250.253.235]:18689 after XXXXX
Jan 12 19:17:02 mail postfix/postscreen[17030]: COMMAND PIPELINING from
[83.149.36.47]:1736 after XXXXX
--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebra...@charite.de | http://www.charite.de
