Bill,
Thus spoke Bill Cole <[EMAIL PROTECTED]> on Monday, 1 September 2003
at 12:05 PM +1000:
[snip]
>That is indeed disturbing.
>
>2 things to check:
>
>1. Is 'relay for clients only' on?
yes, plus about 100 local hosts on my subnet
>2. Was there any other traffic from that IP address, particularly POP
traffic?
no but 1553 like these
10:51:57 2 SMTP-170([211.158.32.247]) {S.0001570181} received, 997 bytes
...
11:29:24 2 SMTP-170([211.158.32.247]) {S.0001573030} received, 1100 bytes
none the day before (on that ip#)
the day before that 211.158.85.36 wacked me:
04:54:08 1 SMTP-018([211.158.85.36]) SPAM? Host is blacklisted per RBL
sbl.spamhaus.org with result [127.0.0.2]
04:54:10 1 SMTP-019([211.158.85.36]) SPAM? Host is blacklisted per RBL
sbl.spamhaus.org with result [127.0.0.2]
04:54:13 3 SMTP-019(scrambler) Failed to verify. Real address is
[211.158.85.36:2673]
04:54:13 2 SMTP-931(202.129.103.11) [S.0001512822] sent, 5420 bytes
04:54:14 4 SYSTEM(SMTP) [S.0001512822] closed, count=0
04:54:14 2 SYSTEM(SMTP) [S.0001512822] sent to (visitus.net)ctomg
04:54:14 2 SYSTEM [S.0001512822] deleted
04:54:14 2 SMTP-931(202.129.103.11) [S.0001512823] sent, 5416 bytes
04:54:14 4 SYSTEM(SMTP) [S.0001512823] closed, count=0
04:54:14 2 SYSTEM(SMTP) [S.0001512823] sent to (bol.com.br)jofilane
04:54:14 2 SYSTEM [S.0001512823] deleted
04:54:14 2 SMTP-997([211.158.89.254]) {S.0001512824} received, 5546 bytes
04:54:14 2 SYSTEM [S.0001512824] S.0001512824 1+0 From:[EMAIL PROTECTED]
04:54:14 4 SYSTEM [S.0001512824] submitted
04:54:14 4 SYSTEM(SMTP) [S.0001512824] opened, count=1
04:54:15 2 SMTP-996([211.158.89.254]) {S.0001512825} received, 1020 bytes
04:54:15 2 SMTP-931(202.129.103.11) [S.0001512824] sent, 5438 bytes
04:54:16 2 SYSTEM [S.0001512825] S.0001512825 1+0 From:[EMAIL PROTECTED]
04:54:16 4 SYSTEM [S.0001512825] submitted
04:54:16 4 SYSTEM(SMTP) [S.0001512824] closed, count=0
04:54:16 2 SYSTEM(SMTP) [S.0001512824] sent to (public.east.cn.net)huangsc
04:54:16 4 SYSTEM(SMTP) [S.0001512825] opened, count=1
04:54:16 2 SYSTEM [S.0001512824] deleted
04:54:16 2 SMTP-931(202.129.103.11) [S.0001512825] sent, 912 bytes
04:54:16 2 SMTP-997([211.158.89.254]) {S.0001512827} received, 1008 bytes
then
04:54:16 2 SMTP-019([211.158.85.36]) {S.0001512828} received, 5519 bytes
and 1989 more of them, as you see this is interleaved other 211.158.x.x
getting in.
btw 202.129.103.11 is my outgoing smtp relay but not open (osX webstar
mail with CarraFix limiting the band width - I'm on a routed ADSL line).
hf,
Nick Quinn
Sunshine Beach Software in OZ
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
