[courier-users] ESMTP command error - a LOT of them

I am seeing a few too many of "502 ESMTP command error" in the log reports
each night (logwatch). Here are but a few examples:


"502 ESMTP command error",cmd: CELLPADDING=4><TR><TD colspan=2 align=center
bgcolor=#C0C0FF><FONT FACE=arial><B><A : 8 Time(s)

"502 ESMTP command error",cmd: CONTENT-LENGTH: 4805: 16 Time(s)

"502 ESMTP command error",cmd: DATA: 697 Time(s)

"502 ESMTP command error",cmd: RCPT TO:<joe@somedomain.com>: 20 Time(s)


They span from all sorts of html garbage (obvious spam), to actual commands
that appear VALID (DATA: RCPT TO: HOST: SENDER:).

My question is... Should I be alarmed? Is esmtpd doing something bad that
causes all these? Is it because esmtpd denies them relay, but they still
spew forth data and esmtpd goes "WTF?!"...


Some counts:
grep -c "502 ESMTP command error" maillog
2662
grep -c "513 Relaying denied" maillog
28219
grep -c "456 Address temporary unavailable" maillog
3879


These are the maxdaemon counts for a day:
35 active connections.: 6 Time(s)
36 active connections.: 5 Time(s)
37 active connections.: 4 Time(s)
38 active connections.: 5 Time(s)
39 active connections.: 4 Time(s)
40 maximum active connections.: 25 Time(s)



-Randall Shaw



-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users