From owner-freebsd-questions  Tue Mar 18 16: 1:15 2003
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id DEA3437B401
	for <freebsd-questions@FreeBSD.ORG>; Tue, 18 Mar 2003 16:01:13 -0800 (PST)
Received: from wonkity.com (wonkity.com [65.173.111.5])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EC3CB43F3F
	for <freebsd-questions@FreeBSD.ORG>; Tue, 18 Mar 2003 16:01:10 -0800 (PST)
	(envelope-from wblock@wonkity.com)
Received: from wonkity.com (localhost [127.0.0.1])
	by wonkity.com (8.12.8/8.12.8) with ESMTP id h2J015L3041105;
	Tue, 18 Mar 2003 17:01:06 -0700 (MST)
	(envelope-from wblock@wonkity.com)
Received: from localhost (wblock@localhost)
	by wonkity.com (8.12.8/8.12.8/Submit) with ESMTP id h2J015Dh041102;
	Tue, 18 Mar 2003 17:01:05 -0700 (MST)
Date: Tue, 18 Mar 2003 17:01:05 -0700 (MST)
From: Warren Block <wblock@wonkity.com>
To: "Phillip Smith (mailing list)" <lists@3bags.com>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: rejected mail hosts?
In-Reply-To: <001c01c2ed56$c737f9e0$aeb423cf@3bagsmedia>
Message-ID: <20030318165602.O40964@wonkity.com>
References: <001c01c2ed56$c737f9e0$aeb423cf@3bagsmedia>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Tue, 18 Mar 2003, Phillip Smith (mailing list) wrote:

> I've started getting an seemingly large amount of these... last week it
> was one or two a day, no this:
>
> Should I be concerned?
>
> Checking for rejected mail hosts:
>    8 21cn.com
>    4 xinhuanet.com

[long list snipped]

Check /var/log/maillog.  These domains are all over, and probably they
weren't all blocked for the same reason.  If you have "550" entries in
your /etc/access file, they'll show up on this list.  Or if you use a
DNSBL, or various other reasons.  Make sure you aren't running an open
relay, open proxies, or an insecure formmail, any of which can be blood
in the water for spammers.

-Warren Block * Rapid City, South Dakota USA

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message