On Fri, Dec 15, 2000 at 02:56:42PM -0500, Jesse Sunday wrote:
> Hello all, just noticed these in my logs (over and over again) -
> I eventually denied all ip access (incoming) - Have any of you seen this
> before??? What was happening??? Below are the contents of my 'maillog'
This may (or may not) be an indication for someone trying to inject
tons of SPAM to your server. Your server rejects them and so no
"new messages" are generated.
qmail-smtpd doesn't log anything (besides severe failures) so you won't
see anything unless you patch your qmail-smtpd.
Another solution is to plug recordio (from the uscpi-tcp package)
between tcpserver and qmail-smtpd, but then you will see *everthing*
in the communication between your smtpd and any other.
I have a patch, that one can plug recordio permanently but it will
only be logging, if the RECORDIO environment variable is set (which can
be easily accomplished via tcpserver). I find this very handy if you
want to only trace connections from special IPs.
I checked, the patch is for 0.84 and will not work with 0.88.
\Maex
--
SpaceNet AG | http://www.Space.Net/ | Stress is when you wake
Research & Development | mailto:[EMAIL PROTECTED] | up screaming and you
Joseph-Dollinger-Bogen 14 | Tel: +49 (89) 32356-0 | realize you haven't
D-80807 Muenchen | Fax: +49 (89) 32356-299 | fallen asleep yet.
