Re: Connections from "unknown"

2018-08-25 Thread Wietse Venema
Wietse Venema: > J Doe: > > Hello, > > > > I noticed something interesting in my logs today. I am running Postfix > > 3.3.1: > > > > Aug 24 21:09:25 server postfix/submission/smtpd[10256]: connect from > > unknown[unknown]:unknown > > Aug 24 21:09:25 server

Re: Connections from "unknown"

2018-08-25 Thread Wietse Venema
J Doe: > Hello, > > I noticed something interesting in my logs today. I am running Postfix 3.3.1: > > Aug 24 21:09:25 server postfix/submission/smtpd[10256]: connect from > unknown[unknown]:unknown > Aug 24 21:09:25 server postfix/submission/smtpd[10256]: lost connection > after

Connections from "unknown"

2018-08-24 Thread J Doe
Hello, I noticed something interesting in my logs today. I am running Postfix 3.3.1: Aug 24 21:09:25 server postfix/submission/smtpd[10256]: connect from unknown[unknown]:unknown Aug 24 21:09:25 server postfix/submission/smtpd[10256]: lost connection after CONNECT from

Re: postfix/smtpd connections from unknown users. Dealing with same?

2016-03-08 Thread Robert Chalmers
Yes, I am using postscreen. So I’m presuming that’s enough. postconf -n | grep postscreen postscreen_access_list = permit_mynetworks, cidr:/usr/local/etc/postfix/postscreen_access.cidr, cidr:/usr/local/etc/postfix/postscreen_spf_whitelist.cidr postscreen_bare_newline_action = enforce

Re: postfix/smtpd connections from unknown users. Dealing with same?

2016-03-08 Thread @lbutlr
On Mar 8, 2016, at 9:15 AM, Robert Chalmers wrote: > I can put them in a postfix blacklist. And possible write a script to update > the list on a daily basis as more are added. Are you using postscreen? If not, you should. You’ll see dogs like: Mar 8 09:35:20 mail

Re: postfix/smtpd connections from unknown users. Dealing with same?

2016-03-08 Thread Wietse Venema
Robert Chalmers: > This afternoon, over the course of about 4 hours, I?ve logged 741 > connections like this. > > Mar 8 15:05:46 zeus postfix/smtpd[92324]: connect from unknown[185.130.5.90] > Mar 8 15:07:30 zeus postfix/smtpd[92616]: connect from > unknown[131.161.138.190] > Mar 8 15:07:39

postfix/smtpd connections from unknown users. Dealing with same?

2016-03-08 Thread Robert Chalmers
This afternoon, over the course of about 4 hours, I’ve logged 741 connections like this. Mar 8 15:05:46 zeus postfix/smtpd[92324]: connect from unknown[185.130.5.90] Mar 8 15:07:30 zeus postfix/smtpd[92616]: connect from unknown[131.161.138.190] Mar 8 15:07:39 zeus postfix/smtpd[92324]:

Lots of connections from Unknown

2010-03-16 Thread Patric Falinder
I just noticed that I had a lot of these messages in my logs and was just wondering what they were: Mar 16 16:34:02 sexan postfix/smtpd[25331]: connect from unknown[unknown] Mar 16 16:34:02 sexan postfix/smtpd[25331]: lost connection after CONNECT from unknown[unknown] Mar 16 16:34:02 sexan

Re: Lots of connections from Unknown

2010-03-16 Thread Noel Jones
On 3/16/2010 10:41 AM, Patric Falinder wrote: I just noticed that I had a lot of these messages in my logs and was just wondering what they were: Mar 16 16:34:02 sexan postfix/smtpd[25331]: connect from unknown[unknown] Mar 16 16:34:02 sexan postfix/smtpd[25331]: lost connection after CONNECT

Re: Lots of connections from Unknown

2010-03-16 Thread Manuel Mely
On Tue, Mar 16, 2010 at 11:41 AM, Patric Falinder patric.falin...@omg.nu wrote: I just noticed that I had a lot of these messages in my logs and was just wondering what they were: Mar 16 16:34:02 sexan postfix/smtpd[25331]: connect from unknown[unknown] Mar 16 16:34:02 sexan

Re: Lots of connections from Unknown

2010-03-16 Thread Wietse Venema
Manuel Mely: Do you have a monitoring tool in your network? Maybe it's a Nagios testing your smtp server. That also happens to me in my loadbalancer, keepalived test smtp port with a telnet and then disconnects and i have a lot of this message in my logs too. Is there a way to avoid this?