I cannot be sure. should be these ones.
/var/log/mail
Oct 21 00:30:17 server sendmail[906]: g9KGUAlZ000906:
to=[EMAIL PROTECTED], delay=00:00:07, xdelay=00:00:06, mailer=esmtp,
pri=39556, relay=homemail.doregi.com. [203.233.237.24], dsn=5.7.1,
stat=User unknown
Oct 21 00:30:18 server
the full message header:
From - Mon Oct 21 00:46:47 2002
X-UIDL: 3db2dd240002
X-Mozilla-Status: 0001
X-Mozilla-Status2: 1000
Received: from localhost (localhost)
by server.donkeyware.org (8.12.6/8.12.6) id g9KGUAla000906;
Mon, 21 Oct 2002 00:30:18 +0800
Date: Mon, 21 Oct 2002 00:30:18
thes signature. look like somthing tricky...
--g9KGUAlZ000906.1035131410/server.donkeyware.org--
--g9KGUAla000906.1035131418/server.donkeyware.org--
m.w.chang wrote:
is it someone trying to use my smtp as a relay but failed?
but how did it trigger my sendmail to do the job? I didn't reply to
That would be good. I'd also like to see the Sendmail logs (in COL this
is located in /var/log/mail). I assume this is where the original post
data came from.
On Tue, 22 Oct 2002 09:57:28 +0800
m.w.chang [EMAIL PROTECTED] wrote:
I could post the whole message header tonight. it's quite a long
This is the header of the notification message to postmaster.
I'm more interested in the log messages as they appear in syslog.
On Tue, 22 Oct 2002 21:43:55 +0800
m.w.chang [EMAIL PROTECTED] wrote:
the full message header:
From - Mon Oct 21 00:46:47 2002
X-UIDL: 3db2dd240002
Could you include more of the logs?
On Mon, 21 Oct 2002 14:06:12 +0800
m.w.chang [EMAIL PROTECTED] wrote:
but I don't understand how it get to my smtp. I fetchmail messages from
that cityu pop, which would be procmail into my mbox. It seems that the
attempt to relay the message happened
I could post the whole message header tonight. it's quite a long one...
Matthew Carpenter wrote:
Could you include more of the logs?
but I don't understand how it get to my smtp. I fetchmail messages from
that cityu pop, which would be procmail into my mbox. It seems that the
attempt to relay
yes, I opened port 25 while keeping an eye on the /var/log/mail for
invalid relay errors (my sendmail relay only localhost and internal
network). I want to appreciate the amount of attack from spammers. :)
also, I want to learn using sendmail to receive messages.
Double check your firewall.
