Charles Cazabon wrote:
>
> Stephen Bosch <[EMAIL PROTECTED]> wrote:
> > Dave Sill wrote:
> > > Stephen Bosch <[EMAIL PROTECTED]> wrote:
> > >
> > > >Well, my logs are filling up with garbage
> > >
> > > Garbage or log entries? Sample, please?
> >
> > Sorry -- it's just that I quoted it at great length before...
> [...]
> > > Jun 12 14:09:12 hotcube qmail: 992376552.507323 info msg 1005716: bytes
> > > 266 from <[EMAIL PROTECTED]> qp 27390 uid 502
> > > Jun 12 14:09:12 hotcube qmail: 992376552.660776 info msg 1005715: bytes
> > > 266 from <[EMAIL PROTECTED]> qp 27403 uid 502
> > > Jun 12 14:09:12 hotcube qmail: 992376552.815629 info msg 1005716: bytes
> > > 266 from <[EMAIL PROTECTED]> qp 27416 uid 502
> > > Jun 12 14:09:42 hotcube qmail: 992376582.939013 info msg 1005715: bytes
> > > 266 from <[EMAIL PROTECTED]> qp 27450 uid 502
>
> Each of those messages has a different qmail-queue PID. From this, you can
> deduce that the sender is connecting to your server, sending the message,
> and somehow disconnecting or misinterpreting qmail's response to the DATA
> command. The sender thinks the delivery failed, so it tries again, and again,
> ad infinitum.
>
> Capture one of the messages' SMTP conversation using recordio. That should
> tell you exactly how the sender's MTA is broken. You can then inform
> postmaster at that domain.
What's the syntax for that? Does it come with a man page?
> Or block their IP address from connecting to your SMTP daemon. You choice.
That would mean I would be blocking myself - that "from" information
indicates a local user.
Is this really what's happening? I am beginning to worry that something
is majorly misconfigured here... but the server works perfectly! All the
mail that is sent arrives, nobody has problems sending out...
*bangs head*
So... if the queue is empty, this log stuff indicates that something is
repeatedly trying to send. If it's a local user, then... could it be a
broken application? Oh boy.
-Stephen-
