Just finalized some more tracing and look what I found in Qmail Wiki :


       I see a message in my smtp log that states
       "User_and_password_not_set,_continuing_without_authentication".
       What is going on?

That message is just the remote-auth patch saying that the destination did not have a username/password set in smtproutes, which is usually the intended behavior. This is a diagnosis tool for people who actually set artificial routes that require login/password. This is not an error message and can be safely ignored.



So nothing to worry abot then ?

Cheers,
Finn

Den 26-02-2014 11:23, Finn Buhelt skrev:
Hi Eric & Eric.

I have same issue in my send log - big difference is though that I do have known mailadresses in between the <> (e.g. <n...@mailaddr.dk>) - only happens when sending outgoing mails - all outgoing mails.

This seems to have been a known issue with qmail back in 2006 according to findings on the net - there was entry made in bugzilla then, but I cannot find it anymore.

Regards,
Finn


Den 26-02-2014 02:07, Eric Shubert skrev:
On 02/25/2014 04:04 PM, Eric Broch wrote:
Hello list,

I have messages in my 'send' log with the following format:

2014-02-25 15:36:30.091878500 new msg 2884020
2014-02-25 15:36:30.091879500 info msg 2884020: bytes 4379 from <> qp
21937 uid 7796
2014-02-25 15:36:30.095577500 starting delivery 8072: msg 2884020 to
remote debbiet...@att.net
2014-02-25 15:36:30.095578500 status: local 0/10 remote 1/60
2014-02-25 15:36:31.196274500 delivery 8072: success:
User_and_password_not_set,_continuing_without_authentication./<debbiet...@att.net>_204.127.208.75_accepted_message./Remote_host_said:_250_ok_;_id=20140225223629s0300l57ooe/
2014-02-25 15:36:31.196278500 status: local 0/10 remote 0/60
2014-02-25 15:36:31.196279500 end msg 2884020

The odd part is from the 2nd line:

'from <>'

And corresponding message in my queue:

messages in queue: 1
messages in queue but not yet preprocessed: 0
25 Feb 2014 22:31:05 GMT  #2884150  2145 <debbiet...@att.net>  bouncing
   done  remote  wildwestlady1...@msn.com
         remote  sherry.fe...@sodexhousa.com
   done  remote  sherrylaw...@msn.com
   done  remote  buddecha...@yahoo.com
   done  remote  she...@whimsicalplace.com
   done  remote  shi...@zoominternet.net
   done  remote  shipshewanash...@aol.com
   done  remote  shm...@bellsouth.net
   done  remote  shopgenerati...@gmail.com

Does anyone know what this means, that is, is my server being used as a
relay somehow?

Eric

---------------------------------------------------------------------

Peculiar all right.
I looked for ' from <>' in my send log and found a few entries. Then I found corresponding double-bounce messages in my postmaster account. Turns out, they were submitted with authentication for an account that's hardly ever used (if at all). I changed the password (was pretty weak) and I expect things will be ok now.

Generally speaking, I'd look for corresponding messages in the the smtp/submission queues to see how the message entered the host. Chances are there's a breach.

Might be worth looking for ' from <>' occasionally in the send logs to see what might be going on.

Thanks EB!



---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



Reply via email to