You're seeing two messages from that process because both messages were generated by the same process. Your "log-level" option must be set high enough (i.e. "verbose" or higher) that spamdyke is outputting more than just errors and ALLOWED/DENIED messages. It's also printing some messages to indicate what filters are running and what data they're using.
In this case, the recipient was rejected because the address isn't hosted by your server and the sender doesn't have permission to relay. The chkuser filter caught this problem and rejected the message. spamdyke saw the rejection and logged it. BTW, spamdyke can prevent relaying itself if you use the "access-file" and "local-domains-file" options. That would allow spamdyke to print more specific rejection messages in your logs. -- Sam Clippinger Sergio Minini (NETKEY) wrote: > Thanks Faris. > But, why do I have a double entry for the same PID? (11769) > is it related to 4.0.x version logging? > > -----Original Message----- > *From:* [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] *On Behalf Of *Faris > Raouf > *Sent:* Monday, October 06, 2008 11:08 AM > *To:* 'spamdyke users' > *Subject:* Re: [spamdyke-users] Unusual log entries > > The first two are easy. The remote probably dropped the > connection, resulting in the “unable to write” error. > > For the last two, someone tried to use your server to relay spam, > or at least to test if they could (but they failed) > > Faris. > > *From:* [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] *On Behalf Of *Sergio > Minini (NETKEY) > *Sent:* 06 October 2008 14:50 > *To:* 'spamdyke users' > *Subject:* [spamdyke-users] Unusual log entries > > Hey there, I was checking spamdyke errors in the maillog and found > these unusual entries that I cannot understand. Anyone has any ideas? > > Thanks! > > -Sergio > > /*** > > Oct 6 10:15:07 virtuality spamdyke[1666]: ERROR: unable to write > 30 bytes to file descriptor 1: Connection reset by peer > Oct 6 10:16:02 virtuality spamdyke[1792]: ERROR: unable to write > 30 bytes to file descriptor 1: Connection reset by peer > ***/ > > /*** > > Oct 6 06:47:53 virtuality spamdyke[11769]: FILTER_OTHER: response: > "553 sorry, that domain isn't in my list of allowed rcpthosts > (#5.5.3 - chkuser)" > Oct 6 06:47:53 virtuality spamdyke[11769]: DENIED_OTHER from: > [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> to: [EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]> origin_ip: 85.21.236.73 origin_rdns: > sger.dialup.corbina.ru auth: (unknown) > ***/ > > ------------------------------------------------------------------------ > > _______________________________________________ > spamdyke-users mailing list > [email protected] > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
