orngca-mls02.socal.rr.com
 
Doesnt match any of the existing DUNNO's that were discussed heavily a while
ago that I remember saving and using.
( wasnt matching my two DUNNO lines anyway ).
 
I'm scanning my logs looking for other possible legits, so far this is the
only one, so i've added a dunno like just for it.
 
Oct 21 17:38:34 mx1 postfix1/smtpd[91842]: 6EB421FA624: reject: RCPT from
orngca-mls02.socal.rr.com[66.75.160.17]: 554
<orngca-mls02.socal.rr.com[66.75.160.17]>: Client host rejected: ACL
subscriber_network, (roadrunner)
<http://mx.nwfl.net/?a=sn&m=orngca-mls02.socal.rr.com>
http://mx.nwfl.net/?a=sn&m=orngca-mls02.socal.rr.com; from=<*********
<mailto:[EMAIL PROTECTED]> @hawaii.rr.com> to=<*********
<mailto:[EMAIL PROTECTED]> @bsc.net> proto=ESMTP
helo=<orngca-mls02.socal.rr.com>

Oct 21 19:35:21 mx1 postfix1/smtpd[97400]: 64CFE1FA833: reject: RCPT from
orngca-mls02.socal.rr.com[66.75.160.17]: 554
<orngca-mls02.socal.rr.com[66.75.160.17]>: Client host rejected: ACL
subscriber_network, (roadrunner)
<http://mx.nwfl.net/?a=sn&m=orngca-mls02.socal.rr.com>
http://mx.nwfl.net/?a=sn&m=orngca-mls02.socal.rr.com; from=<*********
<mailto:[EMAIL PROTECTED]> @dc.rr.com> to=<********* <mailto:[EMAIL PROTECTED]>
@cfi.net> proto=ESMTP helo=<orngca-mls02.socal.rr.com>
 
> telnet orngca-mls02.socal.rr.com 25
Trying 66.75.160.17...
Connected to orngca-mls02.socal.rr.com.
Escape character is '^]'.
220 orngca-mls02.socal.rr.com ESMTP *** FOR AUTHORIZED USE ONLY! ***
 
Banner looks the same as the rest of the RR MTA's
Looks legit to me.
 
( I found this during a complaint of a user not receiving email from one of
her friends occasionally )



Reply via email to