On Wed, Oct 31, 2007 at 05:42:50PM -0500, Florin Iucha wrote: > Package: logcheck-database > Version: 1.2.63 > Severity: important > > > I am running postfix with postgrey for graylisting and I'm getting tons > of : > > Oct 31 16:20:21 hermes postfix/smtpd[6778]: NOQUEUE: reject: RCPT from > $HOST[$IP]: 450 4.2.0 <>: Sender address rejected: Server unavailable. Try > again later.; from=<> to=<[EMAIL PROTECTED]> proto=ESMTP helo=<$HOST> > > I am getting too many of those with an zero-length from and with > abqnm$RANDOM_STRING as the originator, so I suspect it is some > clever antispam or open relay testing tool. At any rate, it is > generating waay too much noise. That's because the rule is:
<[^[:space:]]+>: (Sender|Recipient) address rejected: so it seems that it should be <[^[:space:]]*>: (Sender|Recipient) address rejected: However it's not clear to me why the sender address is being rejected, as <> is not only valid but required to be allowed for bounces. I note that postfix is using <> when I do: "mail from:>" but not giving the "server unavailable" message (instead apparently treating it as the null originator). Can you confirm that DNS on the logcheck/postfix machine(s) is working? _______________________________________________ Logcheck-devel mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel
