If you search on ninus.ocn.ne.jp, you get lots of spam warnings. If coerced, I'd guess that you have a program on your machine or in your network that's trying to send out those spam emails. Perhaps you're part of a botnet?
On 07/28/2016 03:54 PM, Russell Standish wrote:
One for the technorati: For the past few months I've been seeing the following message appear in my logs fairly frequently: Jul 29 08:45:54 SamsungBlue postfix/smtpd[28632]: warning: Illegal address syntax from localhost[::1] in MAIL command: <SRS0=KqpXd=PB=ninus.ocn.ne.jp="toki214."@hpcoders.com.au> Jul 29 08:45:54 SamsungBlue postfix/smtpd[28632]: warning: Illegal address syntax from localhost[::1] in MAIL command: <SRS0=kc6Up=RN=globe.ocn.ne.jp="bello."@hpcoders.com.au> What is is saying is that something on my localhost (a laptop) is attempting to send email to an invalid email address, the rather bizarre globe.ocn.ne.jp="bello."@hpcoders.com.au I'm guessing this is some sort of attempted mail relay, but I can't see a rogue process on the system, and the SMTP port is blocked externally, so its not coming from outside AFICT. Also, cannot see any suspicious files hanging around in the postfix staging directory /var/spool/postfix. The problem persists through booting. Has anyone seen anything like this before? Nothing turns up on Google. Cheers
-- ☣ glen ============================================================ FRIAM Applied Complexity Group listserv Meets Fridays 9a-11:30 at cafe at St. John's College to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com
