On 07/11/02 at 15:17, Warren Michelsen wrote:
> At 1:26 PM -0700 07/11/2002, Global Homes Webmaster wrote:
> >
> >What, if anything, does your log say about these messages? That
> >might give you some insight as to why they're being accepted. If
> >you're continuing to receive these messages, you might want to
> >temporarily increase the logging level until you can capture a
> >relevant transaction or two.
>
> Stepped up logging and caught an incoming. What's with "will be
> relayed to a client"? My SMTP setup is to relay for clients only.
> mx1.deals4recruiters.com is not a client!
>
>
> 14:47:13 4 SMTP-228([12.8.241.102]) Input Line: HELO
mx1.deals4recruiters.com\r
> 14:47:13 4 SMTP-228(mx1.deals4recruiters.com) Looking for
> mx1.deals4recruiters.com
> 14:47:13 3 SMTP-228(mx1.deals4recruiters.com) Failed to verify. Real
> address is [12.8.241.102:4170]
> 14:47:13 4 SMTP-228(mx1.deals4recruiters.com) Sending 250
> MDCCLXXVI.com cannot verify mx1.deals4recruiters.com\r\n
> 14:47:13 4 SMTP-228([12.8.241.102]) Input Line: MAIL
> FROM:<[EMAIL PROTECTED]>\r
> 14:47:13 4 SMTP-228([12.8.241.102]) Sending 250
> <[EMAIL PROTECTED]> sender accepted\r\n
> WHY is this sender being accepted?
Relays aren't rejected based on the envelope sender alone -- until it gets
the RCPT TO, SIMS can't know whether this is a third-party relay attempt or
a message being sent to a local user.
> 14:47:13 4 SMTP-228([12.8.241.102]) Input Line: RCPT
> TO:<[EMAIL PROTECTED]>\r
> 14:47:13 4 SMTP-228([12.8.241.102]) Looking for mail.mdcclxxvi.com
> 14:47:13 4 SMTP-228([12.8.241.102]) Sending 250
> <[EMAIL PROTECTED]> will be relayed to a client.\r\n
This is where the message should be rejected. For some reason, though, SIMS
apparently thinks that <[EMAIL PROTECTED]> should be treated as a
local address. For lack of a better explanation, I'm inclined to go with
the theory that it has something to do with the DNS situation with the
recipient's domain name.
> 14:47:13 4 SMTP-228([12.8.241.102]) Input Line: DATA\r
> 14:47:13 4 SMTP-228([12.8.241.102]) Sending 354 Enter mail, end with
> "." on a line by itself\r\n
> 14:47:14 2 SMTP-228([12.8.241.102]) {S.0000488490} received, 17689 bytes
> 14:47:14 4 SMTP-228([12.8.241.102]) Sending 250 S.0000488490 message
> accepted for delivery\r\n
> 14:47:14 4 SMTP-228([12.8.241.102]) Input Line: QUIT\r
> 14:47:14 4 SMTP-228([12.8.241.102]) Sending 221 MDCCLXXVI.com closing
> connection\r\n
> 14:47:14 4 SMTP-228([12.8.241.102]) Closing
> 14:47:14 4 SMTP-228([12.8.241.102]) Nothing read - stream closed
> 14:47:14 4 SMTP-228([12.8.241.102]) Input Stream ended
> 14:47:14 2 SYSTEM [S.0000488490] S.0000488490 1+0
> From:[EMAIL PROTECTED]
> 14:47:14 4 SMTP [S.0000488490] is enqueued
> 14:47:14 4 SMTP disposing line 12228
> 14:47:14 4 SMTP Line 12230 created for mindcorral.com, [S.0000488490]
> 14:47:14 4 SMTP [S.0000488490] queued to line 12230(0/1). 1 routes
> 14:47:14 4 SMTP-230(mindcorral.com) Got 2 relay(s)
> 14:47:14 4 SMTP-230(mindcorral.com) Looking for mail.mdcclxxvi.com
> 14:47:15 3 SMTP [S.0000488490] dequeueing
> 14:47:15 1 SYSTEM(SMTP) [S.0000488490] failed on
> (mindcorral.com)recipient. Error Code=-15010
> 14:47:15 4 SMTP disposing line 12230
> 14:47:15 2 SYSTEM [S.0000488491]
> <[EMAIL PROTECTED]> 1+0 From:NULL@NULL
So at least SIMS is trying to send a bounce. That was lacking from the last
log snippet you sent, and it was puzzling me a bit.
> 14:47:15 4 SMTP [S.0000488491] is enqueued
> 14:47:15 4 SMTP Line 12231 created for deals4recruiters.com,
[S.0000488491]
> 14:47:15 4 SMTP [S.0000488491] queued to line 12231(0/1). 1 routes
> 14:47:15 4 SMTP-231(deals4recruiters.com) Got 1 relay(s)
> 14:47:15 4 SMTP-231(deals4recruiters.com) Looking for
mail.deals4recruiters.com
> 14:47:15 3 SMTP-231(deals4recruiters.com) Failed to connect to
> [64.48.60.226:25]. reason=61
> 14:47:15 3 SMTP-231(deals4recruiters.com) No relay address is
> accessable. Error Code=-25010
> 14:47:16 3 SMTP [S.0000488491] dequeueing
> 14:47:16 4 SMTP disposing line 12231
> 14:47:35 2 SMTP-224([209.145.196.139]) {S.0000488486} received, 537764
bytes
> 14:47:35 4 SMTP-224([209.145.196.139]) Sending 250 S.0000488486
> message accepted for delivery\r\n
> 14:47:35 4 SMTP-224([209.145.196.139]) Input Line: QUIT\r
> 14:47:35 4 SMTP-224([209.145.196.139]) Sending 221 MDCCLXXVI.com
> closing connection\r\n
> 14:47:35 4 SMTP-224([209.145.196.139]) Closing
--
Christopher Bort | [EMAIL PROTECTED]
Webmaster, Global Homes | [EMAIL PROTECTED]
<http://www.globalhomes.com/>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
