I'm sorry I should have explained that I changed the other mail server for their sake. The actual domain is email.wickedlyfast.net. Sorry about that again. I control mail.geeksnet.com and mail.computer-geeks.com. Thanks for your help guys.
Steve Cobb, A+, MCSE Computer Geeks [EMAIL PROTECTED] ********************************** Need faster Internet service? www.geeksnet.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Cybertime Hostmaster Sent: Friday, December 20, 2002 3:13 PM To: [EMAIL PROTECTED] Subject: [IMGate] Re: Is this a dictionary attack > i'm with the other guy on this one, that log looked like it wasnt him, > it was the OTHER system rejecting the mail, in which case, there is absolutely > nothing you can do. no matter what you change on your system it wont affect > the other guy rejecting a null sender. > > >>>>>>> In: 220 X1 NT-ESMTP Server email.abc.net (IMail 7.05 > >>>>>>> 356740-2) > >>>>>>> Out: EHLO mgw1.geeksnet.com > >>>>>>> In: 250-email.abc.net says hello > > to me that looks like the EHLO is going out, from stevers geeksnet > system to > email.abc email.abc is the one rejecting null sender not geeknet. > unless i just havent had enuf cofee today. Yes, I have always thought that. %host email.abc.net Host not found. %host abc.net abc.net has address 216.201.96.72 abc.net mail is handled (pri=0) by mailin.korax.net %host mail.abc.net mail.abc.net is a nickname for mail.korax.net mail.korax.net has address 216.201.96.57 Telnet to 25 on mail.abc.net is refused. Telnet to 25 on mailin.korax.net gets: 220 mailhub.korax.net ESMTP Postfix %host Computer-Geeks.com Computer-Geeks.com mail is handled (pri=10) by mgw1.geeksnet.com Computer-Geeks.com mail is handled (pri=20) by mail.Computer-Geeks.com %host mail.Computer-Geeks.com mail.Computer-Geeks.com has address 208.34.237.92 %host mgw1.geeksnet.com mgw1.geeksnet.com has address 208.34.239.9 Some more banners: 220 mgw1.geeksnet.com - ESMTP - Postfix - Attn: SPAMMERS will be pursued. 220 X1 NT-ESMTP Server mail.computer-geeks.com (IMail 6.06 214419-5) There is no such host as email.abc.net. abc.net does use Postfix, but it is not even the same net block as Computer-Geeks.com. Nothing seems to match up between the banners he sent and what I can collect. In the end I can only guess this is some other IMail machine, and hope that he is in control of it because that is where a lot of people join this list from. With that educated guess, I am looking at this as an IMail issue on his internal server, and not a Postfix issue. --Eric
