[EMAIL PROTECTED] wrote:
>938452598.883661 tcpserver: pid 8821 from 12.69.1.57
>938452599.324194 tcpserver: ok 8821 :139.142.67.213:25
>57.middletown-02.va.dial-access.att.net:12.69.1.57::4045
tcpserver accepted a connection from 12.69.1.57 and spawned pid 8821
to handle it.
>938452599.352396 tcpserver: status: 8/40
At this point, 8 of the maximum 40 allowed connections are in use.
>938452600.918916 tcpserver: end 8821 status 256
pid 8821 exited with status 256, an error.
>After digging around some I couldn't any docs on qmail-smtpd log
>format.
This is tcpserver logging. qmail-smtpd does do logging.
>I've tried blocking 12.69.1.57 in /etc/tcp.smtp but after a few
>minutes the person gets a different IP address... If someone could
>point me to someplace where I could learn whats happening or explain
>it here that would be great, thanks,
It looks like someone's trying to send you something (could be spam,
of course) and it's not getting through. You could use recordio as
documented in the on-line FAQ to see the complete SMTP sessions:
http://pobox.com/~djb/qmail/faq.html
-Dave
