On 05/10/2010 12:13 PM, Eric Shubert wrote:
Tony White wrote:


On 05/10/2010 11:43 AM, Eric Shubert wrote:
Tony White wrote:


On 05/10/2010 10:59 AM, Eric Shubert wrote:
Tony White wrote:


  Hello all,
   Can someone suggest what might be going on here please?

2010-10-05 01:37:28.913508500 CHKUSER accepted sender: from<[email protected]::> remote<BenQ-PC:unknown:112.192.3.115>
rcpt<>  : sender accepted
2010-10-05 01:37:29.427863500 tcpserver: ok 27040 x.x.x.x:25 
:190.71.212.250::62480
2010-10-05 01:37:29.458675500 CHKUSER accepted rcpt: from<[email protected]::> remote<BenQ-PC:unknown:112.192.3.115>
rcpt<[email protected]>  : found existing recipient
2010-10-05 01:37:29.458697500 policy_check: [email protected] -> [email protected] (UNAUTHENTICATED SENDER)
2010-10-05 01:37:29.458719500 policy_check: policy allows transmission
2010-10-05 01:37:29.459963500 tcpserver: end 27029 status 0
2010-10-05 01:37:29.459964500 tcpserver: status: 3/100
2010-10-05 01:37:29.509451500 rblsmtpd: 190.71.212.250 pid 27040: 
451http://www.spamhaus.org/query/bl?ip=190.71.212.250

   What I am unsure of is that if the [email protected]  does not exist 
anywhere on my server
how can CHKUSER accept it?  This is pretty much a vanilla install of QMT?

-- best wishes Tony White


---------------------------------------------------------------------------------



Any address will be accepted if there's a CatchAll account defined. You can check that setting either on the qmailadmin Email Accounts page, or by looking at the contents of the /home/vpopmail/domains/<domain>/.qmail-default file.


Thank you for the reply Erik but I do not have any catchall accounts set in the 
domain in question!
In fact I do not have a catchall for any domain.

my .qmail-default default is

| /home/vpopmail/bin/vdelivermail '' delete


In that case, did the account ever exist? If so, I would check the vpopmail 
database for anything that might be left over.

No the user never existed. I now now watching the logs and seeing a lot of 
CHKUSER accepted for users that
never existed or existed 10 years ago.


That's unusual indeed. Perhaps Tonix can shed some light on this. My next step would be to have a look at the chkuser source to see how it's making that determination. I expect that the chkuser code is probably ok, but there's something in your setup that's not quite right. Perhaps something that chkuser/vpopmail isn't anticipating.


I have been watching logs for too long now but there really seems to be an 
issue to attend to with CHKUSER.
The number of accounts that are NOT stopped by CHKUSER is surprising. I have 
built a list of all email addresses
in my system and check the more obvious wrong ones via grep. It appears that 
CHKUSER is accepting emails
regardless!
   Is it possible I might have to rebuild it for some reason?


--
best wishes
  Tony White


---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
    For additional commands, e-mail: [email protected]


Reply via email to