What log?

On 12/11/2019 1:26 AM, Tahnan Al Anas wrote:
Hi Eric,

Can you tell me why I am seeing all outgoing getting out with below log?

 success: User_and_password_not_set,_continuing_without_authentication./


Best Regards
Muhammad Tahnan Al Anas

On Wed, Dec 11, 2019 at 1:25 AM <bhow...@teamft.com <mailto:bhow...@teamft.com>> wrote:

    I have checked out authentication with my submission port 587 and
    I must authenticate before sending. However, I have entries in the
    log from a “bad guy IP address” which say “sender accepted” and
    its giving me heartburn.

    2019-12-10 02:43:04.376530500 CHKUSER accepted sender: from
    <someb...@somewhere.net::> remote <4vFoWf3:unknown:>
    rcpt <> : sender accepted

    2019-12-10 03:04:09.269688500 CHKUSER accepted sender: from
    <anotherb...@somewhere.net::> remote
    <3aJfz4D7:unknown:> rcpt <> : sender accepted

    (Note: the IP is the real IP of the bad guy)

    There are no corresponding lines which say, “client allowed to relay”

    Note after the from address, there are two colons:
    <someb...@irtc.net::> . On all legitimate entries, there are no
    such double colons.

    How did this guy get that entry into my submission logs without
    authenticating?  Is this something I need to worry about?

    Any input would be really appreciated

    Boatner Howell

    Foundaton Technologies, LLC

Reply via email to