Hello list!
Could somebody tell me what is going on based on the cross section of
log below? Is something stuck in my customer's outbox? It doesn't
actually send out anything yet the rate quota is engaged. I can't block
the IP as it is a legit wi-fi for an officefull of Macs that uses this
email server. This goes on and on and on in my log. How can I stop it?
My rate section in my config looks like this:
warn ratelimit = 100 / 1h / strict
log_message = Sender rate $sender_rate / $sender_rate_period
2012-09-28 18:39:53 [24427] SMTP connection from [75.71.106.148]:36512
I=[216.240.133.65]:587 (TCP/IP connection count = 1)
2012-09-28 18:39:53 [24593] H=([10.0.1.11]) [75.71.106.148]:36512
I=[216.240.133.65]:587 Warning: Sender rate 283.0 / 1h
2012-09-28 18:39:53 [24593] H=([10.0.1.11]) [75.71.106.148]:36512
I=[216.240.133.65]:587 Warning: Sender rate 284.0 / 1h
2012-09-28 18:39:53 [24593] plain_login authenticator failed for
([10.0.1.11]) [75.71.106.148]:36512 I=[216.240.133.65]:587: 535
Incorrect authentication data
2012-09-28 18:39:53 [24593] SMTP connection from ([10.0.1.11])
[75.71.106.148]:36512 I=[216.240.133.65]:587 lost
2012-09-28 18:39:53 [24593] no MAIL in SMTP connection from
([10.0.1.11]) [75.71.106.148]:36512 I=[216.240.133.65]:587 D=0s
C=EHLO,STARTTLS,EHLO,AUTH
2012-09-28 18:39:54 [24427] SMTP connection from [75.71.106.148]:34435
I=[216.240.133.65]:587 (TCP/IP connection count = 1)
2012-09-28 18:39:54 [24595] H=([10.0.1.11]) [75.71.106.148]:34435
I=[216.240.133.65]:587 Warning: Sender rate 284.9 / 1h
2012-09-28 18:39:55 [24595] H=([10.0.1.11]) [75.71.106.148]:34435
I=[216.240.133.65]:587 Warning: Sender rate 285.9 / 1h
2012-09-28 18:39:55 [24595] plain_login authenticator failed for
([10.0.1.11]) [75.71.106.148]:34435 I=[216.240.133.65]:587: 535
Incorrect authentication data
2012-09-28 18:39:55 [24595] SMTP connection from ([10.0.1.11])
[75.71.106.148]:34435 I=[216.240.133.65]:587 lost
2012-09-28 18:39:55 [24595] no MAIL in SMTP connection from
([10.0.1.11]) [75.71.106.148]:34435 I=[216.240.133.65]:587 D=1s
C=EHLO,STARTTLS,EHLO,AUTH
2012-09-28 18:39:55 [24427] SMTP connection from [75.71.106.148]:41928
I=[216.240.133.65]:587 (TCP/IP connection count = 1)
2012-09-28 18:39:55 [24599] H=([10.0.1.11]) [75.71.106.148]:41928
I=[216.240.133.65]:587 Warning: Sender rate 286.8 / 1h
2012-09-28 18:39:56 [24599] H=([10.0.1.11]) [75.71.106.148]:41928
I=[216.240.133.65]:587 Warning: Sender rate 287.8 / 1h
2012-09-28 18:39:56 [24599] plain_login authenticator failed for
([10.0.1.11]) [75.71.106.148]:41928 I=[216.240.133.65]:587: 535
Incorrect authentication data
2012-09-28 18:39:56 [24599] SMTP connection from ([10.0.1.11])
[75.71.106.148]:41928 I=[216.240.133.65]:587 lost
2012-09-28 18:39:56 [24599] no MAIL in SMTP connection from
([10.0.1.11]) [75.71.106.148]:41928 I=[216.240.133.65]:587 D=1s
C=EHLO,STARTTLS,EHLO,AUTH
2012-09-28 18:39:57 [24427] SMTP connection from [75.71.106.148]:40429
I=[216.240.133.65]:587 (TCP/IP connection count = 1)
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
