Hi David, I don't know why you think this might be off topic... I often see this pattern from people doing non-stealth port scans on the target box. hotmail is so seriously screwed that I'd never take anything seriously if it originated there (although they have improved 300% in the last few months, they're still screwed).
The westfield one is more interesting... perhaps you could ask them if they're having problems? Are you having this problem on lots of originating domains? Packet loss can also cause this, try pinging the target(s) a hundred times or so... any error counts on your interface? Cheers, Marty > > I'm getting a huge number of "NOQUEUE: no connection" messages on my > sendmail log. > > Corresponding to those there are lots of processes that look > like this: > > [root@mail log]# ps ax | grep sendmail > 486 ? S 0:21 sendmail: accepting connections on port 25 > 32559 ? S 0:00 sendmail: startup with > f244.law12.hotmail.com > > When I did this particular ps, there were 14 of these processes, each > corresponding to a NOQUEUE log thus: > > sendmail[32559]: NOQUEUE: Null connection from > f244.law12.hotmail.com > [64.4.19.244] > > Should I be worried? The server doesn't appear to be open relay. I've > tested it using http://www.abuse.net/relay.html > The processes seem to persist for some time. I can't find any sign of > legitimate mail from these hosts. > > They are mostly hotmail or sydhosmtp01.westfield.com.au > > [root@mail log]# grep sydhosmtp01.westfield.com.au maillog | wc -l > 322 > [root@mail log]# > > > David. > > -- > SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ > More Info: http://lists.slug.org.au/listinfo/slug > -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
