Dr Erwin,

I have already tried the newanalyse package on a development (Fedora) Server. It
works, great. The qmFind did not compile (but works as raw perl script).


One more question Dr Erwin, The SMTP log is more informative after your
SpamControl Patch but it lacks the IP addresses in front of the entries. Have I
missed something or its like that only. Here is a sample.


@4000000041416592147f8924 Accept::SNDR::Relay_Client: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414165921589e0bc tcpserver: deny 3214 xxxxx.xxxxxxxxx.xxx:111.222.333.444:25 :218.20.230.246::63771 MAXCONNIP:5
@400000004141659217e0a9cc Accept::ORIG::Local_Sender: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414165921e41b07c Accept::ORIG::Local_Sender: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414165cb2f16d51c tcpserver: status: 69/80
@40000000414165cc0cfb055c Accept::RCPT::Rcpthosts_Rcptto: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414165cc181127dc tcpserver: status: 70/80
@40000000414165f0227f90dc tcpserver: ok 5737 xxxxx.xxxxxxxxx.xxx:111.222.333.444:25 :61.11.87.37::2812
@40000000414165f025019c24 tcpserver: ok 5736 xxxxx.xxxxxxxxx.xxx:111.222.333.444:25 :203.145.134.238:dvromafh:2447
@40000000414165f026fdc5fc Reject::SNDR::Invalid_Relay: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414165f02792fd34 tcpserver: ok 5174 xxxxx.xxxxxxxxx.xxx:111.222.333.444:25 :61.1.220.108::1854
@40000000414166381540b25c Reject::ORIG::No_DNSMX: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>


Actually I get lot of illegal relay requests. I wished to block them via iptables. How do I identify the IP Addresses of such requests like:

@40000000414e5ded0688b8cc Reject::SNDR::Invalid_Relay: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414e5ded1ce82f44 Reject::SNDR::Invalid_Relay: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414e5ded33bb7dfc Reject::SNDR::Invalid_Relay: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414e5dee0f743704 Reject::SNDR::Invalid_Relay: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414e5dee25c65f3c Reject::SNDR::Invalid_Relay: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414e5def00b5dca4 Reject::SNDR::Invalid_Relay: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414e5def16fa7c04 Reject::SNDR::Invalid_Relay: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>
@40000000414e5def2de26bfc Reject::SNDR::Invalid_Relay: MailFrom: <[EMAIL PROTECTED]> RcptTo: <[EMAIL PROTECTED]>


Thanks.


Devendra Singh


______________________________________________________
Devendra Singh
IndiaMART InterMESH Limited
(Global Gateway to Indian Market Place)
B-1, Sector 8, Noida, UP - 201301, India
EPABX : +91-120-2424945, +91-120-3094634, +91-9810646342
Fax: +91-120-2424943
http://www.indiamart.com
http://www.indiangiftsportal.com
http://www.indiantravelportal.com
______________________________________________________




Reply via email to