Strange entries in qmail-send log

This is a discussion on Strange entries in qmail-send log within the alt.comp.mail.qmail forums, part of the Mail Servers and Related category; I've found several entries similar to the following in my logs. Does it mean that it is open relay? @...


Go Back   Usenet Forums > Mail Servers and Related > alt.comp.mail.qmail

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 04-10-2007
Nadav
 
Posts: n/a
Default Strange entries in qmail-send log

I've found several entries similar to the following in my logs. Does
it mean that it is open relay?

@40000000461b3b913a3f79e4 new msg 817864
@40000000461b3b913a3f81b4 info msg 817864: bytes 2367 from <> qp 18589
uid 206
@40000000461b3b913b967e64 starting delivery 326: msg 817864 to remote
kjdhjene@epal.zzn.com
@40000000461b3b913b9695d4 status: local 0/10 remote 1/20
@40000000461b3ba01962a264 delivery 326: failure:
207.183.238.23_does_not_like_recipient./
Remote_host_said:_551_5.7.1_Recipient_not_found/
Giving_up_on_207.183.238.23./
@40000000461b3ba01962bdbc status: local 0/10 remote 0/20
@40000000461b3ba01a13878c bounce msg 817864 qp 18592
@40000000461b3ba01a139efc end msg 817864

I have nothing to do with epal.zzn.com (it is not in rcpthosts), but
apparently it tries to relay this message,
or at least to contact a foreign mail server.

I suspect this is due to the empty from field <>, as it seems to
reject messages with a 553 error code in all open relay tests that
I've tried.

Reply With Quote
  #2 (permalink)  
Old 04-10-2007
Dave Sill
 
Posts: n/a
Default Re: Strange entries in qmail-send log

"Nadav" <thesamet@gmail.com> writes:

> I've found several entries similar to the following in my logs. Does
> it mean that it is open relay?
>
> @40000000461b3b913a3f79e4 new msg 817864
> @40000000461b3b913a3f81b4 info msg 817864: bytes 2367 from <> qp 18589
> uid 206
> @40000000461b3b913b967e64 starting delivery 326: msg 817864 to remote
> kjdhjene@epal.zzn.com
> @40000000461b3b913b9695d4 status: local 0/10 remote 1/20
> @40000000461b3ba01962a264 delivery 326: failure:
> 207.183.238.23_does_not_like_recipient./
> Remote_host_said:_551_5.7.1_Recipient_not_found/
> Giving_up_on_207.183.238.23./
> @40000000461b3ba01962bdbc status: local 0/10 remote 0/20
> @40000000461b3ba01a13878c bounce msg 817864 qp 18592
> @40000000461b3ba01a139efc end msg 817864


Looks like a spam bounce.

--
Dave Sill Oak Ridge National Lab, Workstation Support
Author, The qmail Handbook <http://web.infoave.net/~dsill>
<http://lifewithqmail.org/>: Almost everything you always wanted to know.
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 10:58 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0