yes, i noticed this too. in sendmail log it is: [x.x.x.x] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
we see this all the time - but as you noticed - it is very much increased since 16.12.06. maybe just an ip scan for listing actice mailservers? At 10:15 18.12.2006, you wrote: > >Hi all, > >Just curious if it is only us getting those. >Beginning Saturday we get many SMTP connects >that only send HELO or EHLO and nothing else. I >got like 6 thousand Error messages over the >weekend. At the moment i see between 3 and 10 >such connections per minute and smtp-server. > >Postfix reports the following: > >Transcript of session follows. > > Out: 220 mail.cdp.de > In: HELO > Out: 501 Syntax: HELO hostname > >Session aborted, reason: lost connection > >As far as i can say atm the connections come >from various dialin IP adresses from all over >the world. Any new worm/virus "in the wild" that causes this? > >Regards / Mit freundlichen Grüßen > >Martin Bärtl >------------------------------------------------- >CDP Bharat Forge GmbH >mailto: [EMAIL PROTECTED] > >------------------------------------------------------------------------- >Take Surveys. Earn Cash. Influence the Future of IT >Join SourceForge.net's Techsay panel and you'll get the chance to share your >opinions on IT & business topics through brief surveys - and earn cash >http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV >_______________________________________________ >AMaViS-user mailing list >[email protected] >https://lists.sourceforge.net/lists/listinfo/amavis-user >AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 >AMaViS-HowTos:http://www.amavis.org/howto/ ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
