Re: [spamdyke-users] Email messages that only contain thework "QUIT"
Hi, I had the same problem, but i dont know why it is coming I guess it is specialy when the server is on 100% cpu and many mails are coming to the server.but I can't reproduce this error exactly. Now I try to prevent 100% cpu for a longer time, I hope that helps. My regards, Carlo Blohm Maus Computer C. Jesse Dorfstr. 17 16356 Ahrensfelde Tel. : 030 666 480 30 Fax : 030 666 480 33 Mail : [EMAIL PROTECTED] -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von John Barton Gesendet: Mittwoch, 21. Mai 2008 23:27 An: spamdyke users Betreff: Re: [spamdyke-users] Email messages that only contain thework "QUIT" Sam Clippinger wrote: > That's very strange -- I'm having a hard time imagining any way > spamdyke could be injecting "QUIT" into a message like that. The only > time spamdyke injects "QUIT" at all is when a connection times out, > but then it sends a "." first to end the message. The "QUIT" should > be interpreted as an SMTP command. > > Do your logs show timeouts that correspond with these messages? Are > any other parts of the message corrupted (e.g. the headers)? > > -- Sam Clippinger > > I will try to go back through my logs and correlate the occurrences with a timeout. The headers do appear to be incorrect as well, though, the From address in the header shows up as [EMAIL PROTECTED] -John > John Barton wrote: > >> I have started to receive multiple reports of people getting email >> messages, from various senders, and the message body only contains >> the word "QUIT". At first people thought that someone wanted them to >> quit their job, but finally it was reported to me and I think that >> something is causing SMTP messages to get mangled and somehow the final >> "QUIT" >> command gets placed into the body of the email, with nothing else. I >> have just enabled full logging on my spamdyke installation, but since >> I have never experienced the problem myself and rely on an end user >> to report the problem, I don't know how long it may take to collect >> data from one of these transactions. I am curious if anyone else has >> ever experienced this, and if anyone has a suggestion on what the >> cause could be. I am pretty confident that this never happened before >> I started using spamdyke, but I also believe that I was using >> spamdyke for quite a while before this issue came up. Perhaps one of >> the version upgrades triggered it? Here is my config information, any help >> is appreciated: >> >> Host: CentOS 5.1 32 system >> Netqmail 1.05 with vpopmail, built following guides on shupp dot org >> Spamdyke version 3.1.7 >> >> My spamdyke.conf: >> >> log-level=2 >> idle-timeout-secs=120 >> local-domains-file=/var/qmail/control/rcpthosts >> tls-certificate-file=/var/qmail/control/servercert.pem >> reject-missing-sender-mx >> reject-empty-rdns >> check-dnsrbl=zen.spamhaus.org >> graylist-min-secs=300 >> graylist-max-secs=1814400 >> ip-whitelist-file=/var/qmail/control/spamdyke-ip-whitelist >> max-recipients=25 >> graylist-dir=/var/qmail/vpopmail/spamdyke-graylist >> never-graylist-ip-file=/var/qmail/control/spamdyke-never-graylist-ips >> sender-blacklist-file=/var/qmail/vpopmail/blacklist_senders >> sender-whitelist-file=/var/qmail/vpopmail/whitelist_senders >> recipient-blacklist-file=/var/qmail/vpopmail/blacklist_recipients >> full-log-dir=/mnt/spamdyke-debug >> >> Thanks, >> -John >> ___ >> spamdyke-users mailing list >> spamdyke-users@spamdyke.org >> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >> >> > ___ > spamdyke-users mailing list > spamdyke-users@spamdyke.org > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > ___ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users ___ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users
Re: [spamdyke-users] Email messages that only contain thework "QUIT"
Carlo can you send the log file? Nightduke 2008/5/22, Carlo Blohm <[EMAIL PROTECTED]>: > > Hi, > > I had the same problem, but i dont know why it is coming I guess it is > specialy when the server is on 100% cpu and many mails are coming to the > server.but I can't reproduce this error exactly. > > Now I try to prevent 100% cpu for a longer time, I hope that helps. > > > My regards, > > Carlo Blohm > > > > Maus Computer > C. Jesse > Dorfstr. 17 > 16356 Ahrensfelde > Tel. : 030 666 480 30 > Fax : 030 666 480 33 > Mail : [EMAIL PROTECTED] > > -Ursprüngliche Nachricht- > Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von John Barton > Gesendet: Mittwoch, 21. Mai 2008 23:27 > An: spamdyke users > Betreff: Re: [spamdyke-users] Email messages that only contain thework "QUIT" > > Sam Clippinger wrote: > > That's very strange -- I'm having a hard time imagining any way > > spamdyke could be injecting "QUIT" into a message like that. The only > > time spamdyke injects "QUIT" at all is when a connection times out, > > but then it sends a "." first to end the message. The "QUIT" should > > be interpreted as an SMTP command. > > > > Do your logs show timeouts that correspond with these messages? Are > > any other parts of the message corrupted (e.g. the headers)? > > > > -- Sam Clippinger > > > > > I will try to go back through my logs and correlate the occurrences with a > timeout. The headers do appear to be incorrect as well, though, the From > address in the header shows up as [EMAIL PROTECTED] -John > > > John Barton wrote: > > > >> I have started to receive multiple reports of people getting email > >> messages, from various senders, and the message body only contains > >> the word "QUIT". At first people thought that someone wanted them to > >> quit their job, but finally it was reported to me and I think that > >> something is causing SMTP messages to get mangled and somehow the final > >> "QUIT" > >> command gets placed into the body of the email, with nothing else. I > >> have just enabled full logging on my spamdyke installation, but since > >> I have never experienced the problem myself and rely on an end user > >> to report the problem, I don't know how long it may take to collect > >> data from one of these transactions. I am curious if anyone else has > >> ever experienced this, and if anyone has a suggestion on what the > >> cause could be. I am pretty confident that this never happened before > >> I started using spamdyke, but I also believe that I was using > >> spamdyke for quite a while before this issue came up. Perhaps one of > >> the version upgrades triggered it? Here is my config information, any help > >> is appreciated: > >> > >> Host: CentOS 5.1 32 system > >> Netqmail 1.05 with vpopmail, built following guides on shupp dot org > >> Spamdyke version 3.1.7 > >> > >> My spamdyke.conf: > >> > >> log-level=2 > >> idle-timeout-secs=120 > >> local-domains-file=/var/qmail/control/rcpthosts > >> tls-certificate-file=/var/qmail/control/servercert.pem > >> reject-missing-sender-mx > >> reject-empty-rdns > >> check-dnsrbl=zen.spamhaus.org > >> graylist-min-secs=300 > >> graylist-max-secs=1814400 > >> ip-whitelist-file=/var/qmail/control/spamdyke-ip-whitelist > >> max-recipients=25 > >> graylist-dir=/var/qmail/vpopmail/spamdyke-graylist > >> never-graylist-ip-file=/var/qmail/control/spamdyke-never-graylist-ips > >> sender-blacklist-file=/var/qmail/vpopmail/blacklist_senders > >> sender-whitelist-file=/var/qmail/vpopmail/whitelist_senders > >> recipient-blacklist-file=/var/qmail/vpopmail/blacklist_recipients > >> full-log-dir=/mnt/spamdyke-debug > >> > >> Thanks, > >> -John > >> ___ > >> spamdyke-users mailing list > >> spamdyke-users@spamdyke.org > >> http://www.spamdyke.org/mailman/listinfo/spamdyke-users > >> > >> > > ___ > > spamdyke-users mailing list > > spamdyke-users@spamdyke.org > > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > > > > ___ > spamdyke-users mailing list > spamdyke-users@spamdyke.org > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > ___ > spamdyke-users mailing list > spamdyke-users@spamdyke.org > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > ___ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users
Re: [spamdyke-users] Email messages that only contain thework "QUIT"
Carlo Blohm wrote: > Hi, > > I had the same problem, but i dont know why it is coming I guess it is > specialy when the server is on 100% cpu and many mails are coming to the > server.but I can't reproduce this error exactly. > > Now I try to prevent 100% cpu for a longer time, I hope that helps. > Load on my system remains pretty low, I'm not sure that could be the reason for the issue on my configuration. -John > > My regards, > > Carlo Blohm > > > > Maus Computer > C. Jesse > Dorfstr. 17 > 16356 Ahrensfelde > Tel. : 030 666 480 30 > Fax : 030 666 480 33 > Mail : [EMAIL PROTECTED] > > -Ursprüngliche Nachricht- > Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von John Barton > Gesendet: Mittwoch, 21. Mai 2008 23:27 > An: spamdyke users > Betreff: Re: [spamdyke-users] Email messages that only contain thework "QUIT" > > Sam Clippinger wrote: > >> That's very strange -- I'm having a hard time imagining any way >> spamdyke could be injecting "QUIT" into a message like that. The only >> time spamdyke injects "QUIT" at all is when a connection times out, >> but then it sends a "." first to end the message. The "QUIT" should >> be interpreted as an SMTP command. >> >> Do your logs show timeouts that correspond with these messages? Are >> any other parts of the message corrupted (e.g. the headers)? >> >> -- Sam Clippinger >> >> >> > I will try to go back through my logs and correlate the occurrences with a > timeout. The headers do appear to be incorrect as well, though, the From > address in the header shows up as [EMAIL PROTECTED] -John > > >> John Barton wrote: >> >> >>> I have started to receive multiple reports of people getting email >>> messages, from various senders, and the message body only contains >>> the word "QUIT". At first people thought that someone wanted them to >>> quit their job, but finally it was reported to me and I think that >>> something is causing SMTP messages to get mangled and somehow the final >>> "QUIT" >>> command gets placed into the body of the email, with nothing else. I >>> have just enabled full logging on my spamdyke installation, but since >>> I have never experienced the problem myself and rely on an end user >>> to report the problem, I don't know how long it may take to collect >>> data from one of these transactions. I am curious if anyone else has >>> ever experienced this, and if anyone has a suggestion on what the >>> cause could be. I am pretty confident that this never happened before >>> I started using spamdyke, but I also believe that I was using >>> spamdyke for quite a while before this issue came up. Perhaps one of >>> the version upgrades triggered it? Here is my config information, any help >>> is appreciated: >>> >>> Host: CentOS 5.1 32 system >>> Netqmail 1.05 with vpopmail, built following guides on shupp dot org >>> Spamdyke version 3.1.7 >>> >>> My spamdyke.conf: >>> >>> log-level=2 >>> idle-timeout-secs=120 >>> local-domains-file=/var/qmail/control/rcpthosts >>> tls-certificate-file=/var/qmail/control/servercert.pem >>> reject-missing-sender-mx >>> reject-empty-rdns >>> check-dnsrbl=zen.spamhaus.org >>> graylist-min-secs=300 >>> graylist-max-secs=1814400 >>> ip-whitelist-file=/var/qmail/control/spamdyke-ip-whitelist >>> max-recipients=25 >>> graylist-dir=/var/qmail/vpopmail/spamdyke-graylist >>> never-graylist-ip-file=/var/qmail/control/spamdyke-never-graylist-ips >>> sender-blacklist-file=/var/qmail/vpopmail/blacklist_senders >>> sender-whitelist-file=/var/qmail/vpopmail/whitelist_senders >>> recipient-blacklist-file=/var/qmail/vpopmail/blacklist_recipients >>> full-log-dir=/mnt/spamdyke-debug >>> >>> Thanks, >>> -John >>> ___ >>> spamdyke-users mailing list >>> spamdyke-users@spamdyke.org >>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>> >>> >>> >> ___ >> spamdyke-users mailing list >> spamdyke-users@spamdyke.org >> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >> >> > > ___ > spamdyke-users mailing list > spamdyke-users@spamdyke.org > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > ___ > spamdyke-users mailing list > spamdyke-users@spamdyke.org > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > ___ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users
Re: [spamdyke-users] SMTP auth and spamhaus issues with "The Bat"
Hello again, my "cram-md5" authentication problem drives me nuts. It seems as if my server supports cram-md5 and has no errors with it. If i telnet into my server, *without* spamdyke enabled and use cram-md5 i can successfully send emails, if i enable spamdyke the logfile outputs a "authentication failure" - in the telnet settion the server tells me "go ahead". If i input any futher line i get the dlrbs (in my case spamhaus) message. Is there anything / logs i can look into where i can get more information about my issue? Maybe it is a good thing to mention that my username is the email address. which contains "@" and "." ... maybe this is causing issues. Logfile with spamdyke enabled and telnet SMTP Session May 22 21:42:45 h868914 spamdyke[5745]: INFO: querying 202.203.1.91.in-addr.arpa with DNS server 85.214.7.22:53 (attempt 1) May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS packet: 83 bytes May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS response: PTR May 22 21:42:45 h868914 spamdyke[5745]: INFO: found PTR record for 202.203.1.91.in-addr.arpa: p5B01CBCA.dip.t-dialin.net May 22 21:42:45 h868914 spamdyke[5745]: INFO: searching for domain directory entry: /var/qmail/spamdyke/blacklist_rdns.d/net/t/t-dialin/dip/p5b01cbca.dip.t-dial in.net May 22 21:42:45 h868914 spamdyke[5745]: INFO: searching for domain directory entry: /var/qmail/spamdyke/blacklist_rdns.d/net/t/t-dialin/dip.t-dialin.net May 22 21:42:45 h868914 spamdyke[5745]: INFO: searching for domain directory entry: /var/qmail/spamdyke/blacklist_rdns.d/net/t/t-dialin/t-dialin.net May 22 21:42:45 h868914 spamdyke[5745]: INFO: searching for domain directory entry: /var/qmail/spamdyke/blacklist_rdns.d/net/n/net May 22 21:42:45 h868914 spamdyke[5745]: INFO: querying p5b01cbca.dip.t-dialin.net with DNS server 85.214.7.22:53 (attempt 1) May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS packet: 60 bytes May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS response: A May 22 21:42:45 h868914 spamdyke[5745]: INFO: found A record for p5b01cbca.dip.t-dialin.net: 91.1.203.202 May 22 21:42:45 h868914 spamdyke[5745]: INFO: querying 202.203.1.91.zen.spamhaus.org with DNS server 85.214.7.22:53 (attempt 1) May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS packet: 108 bytes May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS response: TXT May 22 21:42:45 h868914 spamdyke[5745]: INFO: found TXT record for 202.203.1.91.zen.spamhaus.org: http://www.spamhaus.org/query/bl?ip=91.1.203.202 May 22 21:43:57 h868914 spamdyke[5745]: INFO: executing SMTP AUTH command /var/qmail/bin/smtp_auth for user: [EMAIL PROTECTED] May 22 21:43:57 h868914 spamdyke[5745]: ERROR: authentication failure (bad username/password, vchkpw uses this to indicate SMTP access is not allowed): [EMAIL PROTECTED] May 22 21:43:57 h868914 spamdyke[5745]: INFO: executing SMTP AUTH command /var/qmail/bin/cmd5checkpw for user: [EMAIL PROTECTED] May 22 21:43:57 h868914 spamdyke[5745]: ERROR: authentication failure (bad username/password, vchkpw uses this to indicate SMTP access is not allowed): [EMAIL PROTECTED] Logfile with spamdyke enabled and Thunderbird2 May 22 22:03:39 h868914 spamdyke[10205]: INFO: querying 202.203.1.91.in-addr.arpa with DNS server 85.214.7.22:53 (attempt 1) May 22 22:03:39 h868914 spamdyke[10205]: INFO: received DNS packet: 83 bytes May 22 22:03:39 h868914 spamdyke[10205]: INFO: received DNS response: PTR May 22 22:03:39 h868914 spamdyke[10205]: INFO: found PTR record for 202.203.1.91.in-addr.arpa: p5B01CBCA.dip.t-dialin.net May 22 22:03:39 h868914 spamdyke[10205]: INFO: searching for domain directory entry: /var/qmail/spamdyke/blacklist_rdns.d/net/t/t-dialin/dip/p5b01cbca.dip.t-dial in.net May 22 22:03:39 h868914 spamdyke[10205]: INFO: searching for domain directory entry: /var/qmail/spamdyke/blacklist_rdns.d/net/t/t-dialin/dip.t-dialin.net May 22 22:03:39 h868914 spamdyke[10205]: INFO: searching for domain directory entry: /var/qmail/spamdyke/blacklist_rdns.d/net/t/t-dialin/t-dialin.net May 22 22:03:39 h868914 spamdyke[10205]: INFO: searching for domain directory entry: /var/qmail/spamdyke/blacklist_rdns.d/net/n/net May 22 22:03:39 h868914 spamdyke[10205]: INFO: querying p5b01cbca.dip.t-dialin.net with DNS server 85.214.7.22:53 (attempt 1) May 22 22:03:39 h868914 spamdyke[10205]: INFO: received DNS packet: 60 bytes May 22 22:03:39 h868914 spamdyke[10205]: INFO: received DNS response: A May 22 22:03:39 h868914 spamdyke[10205]: INFO: found A record for p5b01cbca.dip.t-dialin.net: 91.1.203.202 May 22 22:03:39 h868914 spamdyke[10205]: INFO: querying 202.203.1.91.zen.spamhaus.org with DNS server 85.214.7.22:53 (attempt 1) May 22 22:03:39 h868914 spamdyke[10205]: INFO: received DNS packet: 108 bytes May 22 22:03:39 h868914 spamdyke[10205]: INFO: received DNS response: TXT May 22 22:03:39 h868914 spamdyke[10205]: INFO: found TXT record for 202.203.1.91.zen.spamhaus.org: http://www.spamhaus.org/query/bl?ip=91.1.203.202 May 22 22:0
Re: [spamdyke-users] SMTP auth and spamhaus issues with "The Bat"
If CRAM-MD5 works correctly without spamdyke, you could be looking at some kind of permission or environmental problem. Have you tried running spamdyke's "config-test" feature to see if it can shed some light (it will test your authentication commands to see if CRAM-MD5 is supported)? Be sure to use the "config-test-user", "config-test-smtpauth-username" and "config-test-smtpauth-password" flags. Also, I seem to recall (but I can't recall why) relaylock doesn't work well with spamdyke when it runs first. Try reordering the command lines in your inetd.conf file to run spamdyke before relaylock. See also this message for some information about running the "config-test" feature with relaylock: http://www.mail-archive.com/spamdyke-users@spamdyke.org/msg00389.html The other option is to simply remove spamdyke's SMTP AUTH flags. When you do that, spamdyke won't be able to check authentication itself; it will just observe the client's authentication attempt and trust qmail's response. If CRAM-MD5 works for qmail, this could solve your problem. -- Sam Clippinger Stefan Pausch wrote: > Hello again, > > my "cram-md5" authentication problem drives me nuts. It seems as if my > server supports cram-md5 and has no errors with it. If i telnet into my > server, *without* spamdyke enabled and use cram-md5 i can successfully send > emails, if i enable spamdyke the logfile outputs a "authentication failure" > - in the telnet settion the server tells me "go ahead". If i input any > futher line i get the dlrbs (in my case spamhaus) message. > > Is there anything / logs i can look into where i can get more information > about my issue? > > Maybe it is a good thing to mention that my username is the email address. > which contains "@" and "." ... maybe this is causing issues. > > Logfile with spamdyke enabled and telnet SMTP Session > May 22 21:42:45 h868914 spamdyke[5745]: INFO: querying > 202.203.1.91.in-addr.arpa with DNS server 85.214.7.22:53 (attempt 1) > May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS packet: 83 bytes > May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS response: PTR > May 22 21:42:45 h868914 spamdyke[5745]: INFO: found PTR record for > 202.203.1.91.in-addr.arpa: p5B01CBCA.dip.t-dialin.net > May 22 21:42:45 h868914 spamdyke[5745]: INFO: searching for domain directory > entry: > /var/qmail/spamdyke/blacklist_rdns.d/net/t/t-dialin/dip/p5b01cbca.dip.t-dial > in.net > May 22 21:42:45 h868914 spamdyke[5745]: INFO: searching for domain directory > entry: /var/qmail/spamdyke/blacklist_rdns.d/net/t/t-dialin/dip.t-dialin.net > May 22 21:42:45 h868914 spamdyke[5745]: INFO: searching for domain directory > entry: /var/qmail/spamdyke/blacklist_rdns.d/net/t/t-dialin/t-dialin.net > May 22 21:42:45 h868914 spamdyke[5745]: INFO: searching for domain directory > entry: /var/qmail/spamdyke/blacklist_rdns.d/net/n/net > May 22 21:42:45 h868914 spamdyke[5745]: INFO: querying > p5b01cbca.dip.t-dialin.net with DNS server 85.214.7.22:53 (attempt 1) > May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS packet: 60 bytes > May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS response: A > May 22 21:42:45 h868914 spamdyke[5745]: INFO: found A record for > p5b01cbca.dip.t-dialin.net: 91.1.203.202 > May 22 21:42:45 h868914 spamdyke[5745]: INFO: querying > 202.203.1.91.zen.spamhaus.org with DNS server 85.214.7.22:53 (attempt 1) > May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS packet: 108 bytes > May 22 21:42:45 h868914 spamdyke[5745]: INFO: received DNS response: TXT > May 22 21:42:45 h868914 spamdyke[5745]: INFO: found TXT record for > 202.203.1.91.zen.spamhaus.org: > http://www.spamhaus.org/query/bl?ip=91.1.203.202 > May 22 21:43:57 h868914 spamdyke[5745]: INFO: executing SMTP AUTH command > /var/qmail/bin/smtp_auth for user: [EMAIL PROTECTED] > May 22 21:43:57 h868914 spamdyke[5745]: ERROR: authentication failure (bad > username/password, vchkpw uses this to indicate SMTP access is not allowed): > [EMAIL PROTECTED] > May 22 21:43:57 h868914 spamdyke[5745]: INFO: executing SMTP AUTH command > /var/qmail/bin/cmd5checkpw for user: [EMAIL PROTECTED] > May 22 21:43:57 h868914 spamdyke[5745]: ERROR: authentication failure (bad > username/password, vchkpw uses this to indicate SMTP access is not allowed): > [EMAIL PROTECTED] > > Logfile with spamdyke enabled and Thunderbird2 > May 22 22:03:39 h868914 spamdyke[10205]: INFO: querying > 202.203.1.91.in-addr.arpa with DNS server 85.214.7.22:53 (attempt 1) > May 22 22:03:39 h868914 spamdyke[10205]: INFO: received DNS packet: 83 bytes > May 22 22:03:39 h868914 spamdyke[10205]: INFO: received DNS response: PTR > May 22 22:03:39 h868914 spamdyke[10205]: INFO: found PTR record for > 202.203.1.91.in-addr.arpa: p5B01CBCA.dip.t-dialin.net > May 22 22:03:39 h868914 spamdyke[10205]: INFO: searching for domain > directory entry: > /var/qmail/spamdyke/blacklist_rdns.d/net/t/t-dialin/dip/p5b01cbca.dip.t-dial > in.net > May 22 22
