Hey all I don't know if this is a pf question but I think pf might be causing it so here comes the question.
I have recently started to notice a stack of the following popping up on the logging server from the border firewall. It runs OBSD 3.5 with a pf ruleset. The log messages (usually several hundred a day) are (2 examples) Sep 28 06:01:17 draco sm-msp-queue[28462]: i8OJU1Xl011892: to=root, delay=3+00:30:01, xdelay=00:00:00, mailer=relay, pri=13083226, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection timed out with [127.0.0.1] Sep 28 06:01:17 draco sm-msp-queue[28462]: i8OJU1Xm011892: to=postmaster, delay=3+00:29:59, xdelay=00:00:00, mailer=relay, pri=13084892, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection timed out with [127.0.0.1] Now, I originally thought that sendmail had stopped accepting connections but no, it is still doing that. I can "telnet localhost 25" and it happily answers back: border# telnet localhost 25 Trying ::1... Connected to localhost. Escape character is '^]'. 220 border.xxxxx.com ESMTP Sendmail 8.12.11/8.12.11; Wed, 29 Sep 2004 09:27:45 +1000 (EST) I am actually not sure what is even trying to send email as the only things running on the box are pf and some IP accounting stuff. I guess it is the OBSD standard security/cron scripts. The pf.conf is a deny by default but I have a line: pass quick on lo0 all .so connections from the box to itself should be fine. So, yeah, any ideas? thanks! A PS. I have googled around and can't seem to find much. eg tried all the things in these: http://www.monkey.org/openbsd/archive/misc/0405/msg01275.html http://www.mailarchive.ca/lists/comp.mail.sendmail/2003-08/0826.html http://monkey.org/openbsd/archive/misc/0308/msg00314.html And in /etc/hosts I have a line: 127.0.0.1 localhost.localdomain localhost Find local movie times and trailers on Yahoo! Movies. http://au.movies.yahoo.com
