>What kind of email is causing this ? crack attempt ? fubared mailserver ?

the latter

>coming from a bellsouth.net ip

The South Shall Lose Again.  /dsl.*bellsouth/ is rotten with mom'n'pop 
spammers, open relays, open proxies, worm-infections.   Not that the are 
any different from any subscriber network.  They'er all toxic.

mta_clients_subscriber.regexp

>Postfix SMTP server: errors from unknown[68.156.91.197]
>Out: 220 spamcop.wirelesscommunitynetworks.com - ESMTP - Postfix - Attn: UCE
>      trespassers will be pursued.
>In:  POST / HTTP/1.1

looks like an HTTP proxy probe

>Out: 502 Error: command not implemented

nope, we speak SMTPese only

>In:  Content-type: application/octet-stream

putting an SMTP header at the envelope stage.

Len




Reply via email to