Date: Tue, 25 Apr 2000 17:10:34 -0600 From: Chris Fedde <chris@fedde.littleton.co.us> To: Michael <cadaver@tucu.net> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Need help reading my maillog Message-ID: <200004252310.e3PNAYM20445@fedde.littleton.co.us> In-Reply-To: <Pine.BSF.4.10.10004251426000.30073-100000@tucu.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 25 Apr 2000 14:30:02 -0700 (PDT) Michael wrote:
+------------------
|
| Hi,
|
| I got a couple messages in my maillog today that looked like this:
|
| Apr 25 13:46:42 tucu sendmail[29869]: NAA29869: ruleset=check_mail,
| arg1=<mike1123@2hb.ne>, relay=IDENT:root@olderman.analytic.ru [212.5.87.200]
,
| reject=501 <mike1123@2hb.ne>... Sender domain must exist
| Apr 25 13:46:42 tucu sendmail[29869]: NAA29869: from=<mike1123@2hb.ne>,
| size=0, class=0, pri=0, nrcpts=0, proto=ESMTP,
| relay=IDENT:root@olderman.analytic.ru [21 2.5.87.200]
|
| Is this something that I should worry about? Am I relaying spam? Is
| someone attempting to relay spam? I'm running 3.3-Release.
|
| Thanks in advance,
|
| michael
+------------------
Sendmail on olderman.analytic.ru is telling tucu.net that the domain
2hb.ne was not resolvable. Recent versions of sendmail's configuration
file make this check on incomming mail. You have something in the
queue on tucu that has a bad sender address in it (mike1123@2hb.ne)
How it got there is the interesting thing. I'd guess someone that
is authorized to use your system has a missconfigured mail client.
If you had an open relay there would be many more than one log line
like above :-)
chris
--
Chris Fedde
303 773 9134
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200004252310.e3PNAYM20445>