Hi,
I see these all the time.
I run 4 mail servers and 1 of
them is for a high usage kids
web site - so I also get a
reasonable amount of email
through my connection.
As stated earlier - it usually
means a port scan, however it
is no use following it up with
the ISP that it came from
because EVERY SINGLE TIME I have
done this, the ISP has ignored me.
I get mail port scans or
"Relaying denied" messages every
single day.
I run a maillog report (every 15
minutes in crontab) that fires
an email to me for every unexpected
message in the maillog on each
server - and I get a lot of the
messages :-)
The report is just a shell script
that uses "egrep -v" to ignore
messages that match what I expect
and two files to keep track of
the head and tail contents of
which each log file so I can tell
what needs to be checked and also
handle logrotate correctly without
ever missing anything in the check.
Basically - it is a fact of the
internet that many people try to
use other services "illegally"
and as long as you have your mail
server secure enough, I'd just
ignore it.
But ... make sure it is secure!
i.e. ensure relaying is extreemly
limited or disabled outside your
subnet if noone else uses it.
-Cheers
-Andrew Smith
> ----- Original Message -----
> From: "Martin Stricker" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, July 26, 2001 4:46 PM
> Subject: Re: sendmail error messages
>
>
>> If outmta021.topica.com really is a mail server (a telnet
>> outmta021.topica.com 25 doesn't get through) you might want to contact
>> it's administrator to thell him his server is severely
>> misconfigured... Do you get such errors only from this server, or is
>> it always another server?
>
> I tried to telnet to the host/port 25 and that didn't go through.
>
> I also just rechecked my logs again and it seems that the topica.com is
> the only server that I get those messages from but the host is
> different as in it's always outmtaXXX.topica.com where XXX=different
> ip's/numbers (dynamic or load balancing?).
>
> Mike
_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list
