unless you're doing any sort of dealing with telocity, it looks like somebody is trying to send a large volume of spam through your mailserver. i'd report this to telocity right away.
-Adam >> (07.12.2002 @ 1609 PST): [EMAIL PROTECTED] said, in 5.4K: << > > can you give a relevant excerpt from your /var/log/maillog and > > /var/log/secure please? > > > > -Adam > > Less that a second of the logs is shown below for /var/log/maillog. The > /var/log/security log is empty and there is no /secure. Is there > somewhere else to look? > > This maillog does not show the address info, I guess since I changed the > access to reject anything from this computer. > > Can you tell anything from this or would you like me to provide more info? > > Thanks > Randy > > > > > > >>> (07.12.2002 @ 0526 PST): [EMAIL PROTECTED] said, in 1.5K: << > >> Hello, > >> > >> I seem to have a situation I don't know where to begin looking to > >> correct. > >> Actually, it is more of a annoyance than a problem. > >> > >> I have a Freebsd system located at a colocation facility that > >> functions as my development and email server. At home, I have a > >> Windows ME computer using Secure CRT to access the Freebsd system. > >> > >> While checking the daily logs, I notice that I have 20,000-50,000 mail > >> host rejections each day. All coming from my home machine. > >> > >> The messages that are getting rejected appear to be all to domains > >> that I have corresponded to in the past. > >> > >> The Window machine is on a completely different ISP/network and the > >> Freebsd machine has no special "knowledge" of the Windows machine. I > >> have updated the latest Macaffee Anti-virus and no virus was > >> discovered. > >> > >> How is an SMTP connection being attempted, through the SSH connection? > >> The only connection between the 2 computers is the password > >> authenticated Secure CRT 3.4. As an added precaution I have set up > >> sendmail access to reject connections from the home Windows computer. > >> (Although, prior, the logs indicated that they were being rejected > >> anyway.) > >> > >> On the Windows computer, I have and use Eudora (pop3/Imap) and Outlook > >> 2000 (Exchange client). > >> > >> I use other computers at other locations to connect in similar manners > >> but no SMTP rejections from these other locations. > >> > >> Any possible causes or solutions or where else to turn to look would > >> be appreciated. > >> > >> Thanks > >> > >> > >> > >> > >> > >> > >> > >> > >> To Unsubscribe: send mail to [EMAIL PROTECTED] > >> with "unsubscribe freebsd-questions" in the body of the message > >> > >>> end of "Rejected Mail Hosts" from [EMAIL PROTECTED] << > > > > > > -- > > "Oh good, my dog found the chainsaw." > > -Lilo > > Adam Weinberger > > > > > Jul 12 15:09:29 desert sendmail[77695]: g6CK9TI77695: ruleset=check_relay, > arg1=dsl-64-192-42-53.telocity.com, arg2=64.192.42.5 > 3, relay=dsl-64-192-42-53.telocity.com [64.192.42.53], reject=550 5.7.1 > Access denied > Jul 12 15:09:29 desert sendmail[77700]: g6CK9TI77700: ruleset=check_relay, > arg1=dsl-64-192-42-53.telocity.com, arg2=64.192.42.5 > 3, relay=dsl-64-192-42-53.telocity.com [64.192.42.53], reject=550 5.7.1 > Access denied > Jul 12 15:09:29 desert sendmail[77700]: NOQUEUE: > dsl-64-192-42-53.telocity.com [64.192.42.53] did not issue > MAIL/EXPN/VRFY/ETRN > during connection to MTA > Jul 12 15:09:29 desert sendmail[77695]: NOQUEUE: > dsl-64-192-42-53.telocity.com [64.192.42.53] did not issue > MAIL/EXPN/VRFY/ETRN > during connection to MTA > Jul 12 15:09:30 desert sendmail[77709]: g6CK9UI77709: ruleset=check_relay, > arg1=dsl-64-192-42-53.telocity.com, arg2=64.192.42.5 > 3, relay=dsl-64-192-42-53.telocity.com [64.192.42.53], reject=550 5.7.1 > Access denied > Jul 12 15:09:31 desert sendmail[77711]: g6CK9VI77711: ruleset=check_relay, > arg1=dsl-64-192-42-53.telocity.com, arg2=64.192.42.5 > 3, relay=dsl-64-192-42-53.telocity.com [64.192.42.53], reject=550 5.7.1 > Access denied > Jul 12 15:09:31 desert sendmail[77716]: g6CK9VI77716: ruleset=check_relay, > arg1=dsl-64-192-42-53.telocity.com, arg2=64.192.42.5 > 3, relay=dsl-64-192-42-53.telocity.com [64.192.42.53], reject=550 5.7.1 > Access denied > Jul 12 15:09:31 desert sendmail[77717]: g6CK9VI77717: ruleset=check_relay, > arg1=dsl-64-192-42-53.telocity.com, arg2=64.192.42.5 > 3, relay=dsl-64-192-42-53.telocity.com [64.192.42.53], reject=550 5.7.1 > Access denied > Jul 12 15:09:31 desert sendmail[77709]: NOQUEUE: > dsl-64-192-42-53.telocity.com [64.192.42.53] did not issue > MAIL/EXPN/VRFY/ETRN > during connection to MTA > Jul 12 15:09:31 desert sendmail[77723]: g6CK9VI77723: ruleset=check_relay, > arg1=dsl-64-192-42-53.telocity.com, arg2=64.192.42.5 > 3, relay=dsl-64-192-42-53.telocity.com [64.192.42.53], reject=550 5.7.1 > Access denied > Jul 12 15:09:32 desert sendmail[77717]: NOQUEUE: > dsl-64-192-42-53.telocity.com [64.192.42.53] did not issue > MAIL/EXPN/VRFY/ETRN > during connection to MTA > Jul 12 15:09:32 desert sendmail[77716]: NOQUEUE: > dsl-64-192-42-53.telocity.com [64.192.42.53] did not issue > MAIL/EXPN/VRFY/ETRN > during connection to MTA > Jul 12 15:09:32 desert sendmail[77711]: NOQUEUE: > dsl-64-192-42-53.telocity.com [64.192.42.53] did not issue > MAIL/EXPN/VRFY/ETRN > during connection to MTA > Jul 12 15:09:32 desert sendmail[77723]: NOQUEUE: > dsl-64-192-42-53.telocity.com [64.192.42.53] did not issue > MAIL/EXPN/VRFY/ETRN > during connection to MTA > Jul 12 15:09:32 desert sendmail[77729]: g6CK9WI77729: ruleset=check_relay, > arg1=dsl-64-192-42-53.telocity.com, arg2=64.192.42.5 > 3, relay=dsl-64-192-42-53.telocity.com [64.192.42.53], reject=550 5.7.1 > Access denied > Jul 12 15:09:33 desert sendmail[77729]: NOQUEUE: > dsl-64-192-42-53.telocity.com [64.192.42.53] did not issue > MAIL/EXPN/VRFY/ETRN > during connection to MTA > > > > [EMAIL PROTECTED] > > http://www.crackula.com > > > > > > To Unsubscribe: send mail to [EMAIL PROTECTED] > > with "unsubscribe freebsd-questions" in the body of the message > > > >> end of "Re: Rejected Mail Hosts" from [EMAIL PROTECTED] << -- "Oh good, my dog found the chainsaw." -Lilo Adam Weinberger [EMAIL PROTECTED] http://www.crackula.com To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
