Re: [AMaViS-user] Anyone else is getting many "aborted" SMTP

This is a discussion on Re: [AMaViS-user] Anyone else is getting many "aborted" SMTP within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; yes, i noticed this too. in sendmail log it is: [x.x.x.x] did not issue MAIL/EXPN/VRFY/...


Go Back   Usenet Forums > Anti-Spam and Anti-Virus Related Forums > Amavis User

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 12-18-2006
MK [ info@ea80.net ]
 
Posts: n/a
Default Re: [AMaViS-user] Anyone else is getting many "aborted" SMTP

yes, i noticed this too.

in sendmail log it is:
[x.x.x.x] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA

we see this all the time - but as you noticed - it is very much increased
since 16.12.06. maybe just an ip scan for listing actice mailservers?


At 10:15 18.12.2006, you wrote:
>
>Hi all,
>
>Just curious if it is only us getting those. =


>Beginning Saturday we get many SMTP connects =


>that only send HELO or EHLO and nothing else. I =


>got like 6 thousand Error messages over the =


>weekend. At the moment i see between 3 and 10 =


>such connections per minute and smtp-server.
>
>Postfix reports the following:
>
>Transcript of session follows.
>
> Out: 220 mail.cdp.de
> In: HELO
> Out: 501 Syntax: HELO hostname
>
>Session aborted, reason: lost connection
>
>As far as i can say atm the connections come =


>from various dialin IP adresses from all over =


>the world. Any new worm/virus "in the wild" that causes this?
>
>Regards / Mit freundlichen Gr=FC=DFen
>
>Martin B=E4rtl
>-------------------------------------------------
>CDP Bharat Forge GmbH
>mailto: m.baertl@cdp.de
>
>-------------------------------------------------------------------------
>Take Surveys. Earn Cash. Influence the Future of IT
>Join SourceForge.net's Techsay panel and you'll get the chance to share yo=

ur
>opinions on IT & business topics through brief surveys - and earn cash
>http://www.techsay.com/default.php?p...forge&CID=3DD=

EVDEV
>_______________________________________________
>AMaViS-user mailing list
>AMaViS-user@lists.sourceforge.net
>https://lists.sourceforge.net/lists/...fo/amavis-user
>AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
>AMaViS-HowTos:http://www.amavis.org/howto/



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?p...orge&CID=3DDE=
VDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 11:38 AM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0