Jon Nelson on 21 Oct 2003 10:54:01 -0400


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[PLUG] mail relay?


I get occasional relay attempts on my server, but they have all been
rejected.  Today I noticed these entries and I am a little concerned.

Oct 20 17:02:51 muffin postfix/smtpd[26958]: connect from
218-172-206-249.HINET-IP.hinet.net[218.172.206.249]

Oct 20 17:02:52 muffin postfix/smtpd[26958]: 1864324122:
client=218-172-206-249.HINET-IP.hinet.net[218.172.206.249]

Oct 20 17:02:54 muffin postfix/cleanup[26959]: 1864324122:
message-id=<AlE@seed.net.tw>

Oct 20 17:02:54 muffin postfix/nqmgr[1080]: 1864324122:
from=<IIhBJUcUr@iris.seed.net.tw>, size=2654, nrcpt=2 (queue active) Oct
20 17:02:54 muffin postfix/nqmgr[1080]: 1864324122:
to=<--quincy@linuxnotes.net>, relay=none, delay=2, status=bounced (invalid
recipient syntax: "--quincy@linuxnotes.net")

**Above I get the email from seed.net.tw w/ 2 recipients and one gets
bounced.

Oct 20 17:02:55 muffin postfix/pipe[26963]: 1864324122:
to=<quincy@linuxnotes.net>, relay=cyrus, delay=3, status=sent
(muffin.linuxnotes.net)

**Then next one is recieved (probably spam)

Oct 20 17:02:55 muffin postfix/cleanup[26959]: 0AA16244F5:
message-id=<20031020210255.0AA16244F5@muffin.linuxnotes.net>

Oct 20 17:02:55 muffin postfix/nqmgr[1080]: 0AA16244F5: from=<>,
size=4322, nrcpt=1 (queue active)

**Mail accepted from ? (seed.net.tw) w/ 1 recipient

Oct 20 17:02:55 muffin postfix/smtpd[26958]: disconnect from
218-172-206-249.HINET-IP.hinet.net[218.172.206.249]

Oct 20 17:02:56 muffin postfix/smtp[26966]: 0AA16244F5:
to=<IIhBJUcUr@iris.seed.net.tw>, relay=mx.seed.net.tw[139.175.54.239],
delay=1, status=bounced (host mx.seed.net.tw[139.175.54.239] said: 55 0
unknown user)

**Relay attempted and bounced only because of unknown user at
mx.seed.net.tw.

My question is why did this happen?

Here are the relevent entries in /etc/postfix/main.cf:

myhostname = muffin.linuxnotes.net
mydomain = linuxnotes.net
mydestination = $myhostname, localhost.$mydomain, $mydomain,
alisoncafe.com
mynetworks = 192.168.1.0/24, 127.0.0.0/8
relay_domains = $mydestination

TIA,

Jon
-- 
Trooper Jon S. Nelson, Linux Certified Admin., CCNA
Pa. State Police, Bureau of Criminal Investigation
Computer Crimes Unit
Work: 610.344.4471 Cell/Page: 866.284.1603
jonelson@state.pa.us





___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug