One for the technorati:

For the past few months I've been seeing the following message appear
in my logs fairly frequently:

Jul 29 08:45:54 SamsungBlue postfix/smtpd[28632]: warning: Illegal address 
syntax from localhost[::1] in MAIL command: 
<SRS0=KqpXd=PB=ninus.ocn.ne.jp="toki214."@hpcoders.com.au>
Jul 29 08:45:54 SamsungBlue postfix/smtpd[28632]: warning: Illegal address 
syntax from localhost[::1] in MAIL command: 
<SRS0=kc6Up=RN=globe.ocn.ne.jp="bello."@hpcoders.com.au>

What is is saying is that something on my localhost (a laptop) is
attempting to send email to an invalid email address, the rather
bizarre globe.ocn.ne.jp="bello."@hpcoders.com.au

I'm guessing this is some sort of attempted mail relay, but I can't
see a rogue process on the system, and the SMTP port is blocked
externally, so its not coming from outside AFICT. Also, cannot see any
suspicious files hanging around in the postfix staging directory
/var/spool/postfix.

The problem persists through booting.

Has anyone seen anything like this before? Nothing turns up on Google.

Cheers

-- 

----------------------------------------------------------------------------
Dr Russell Standish                    Phone 0425 253119 (mobile)
Principal, High Performance Coders
Visiting Senior Research Fellow        [email protected]
Economics, Kingston University         http://www.hpcoders.com.au
----------------------------------------------------------------------------

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

Reply via email to