From owner-freebsd-questions Tue Apr 25 20:16:38 2000 Delivered-To: freebsd-questions@freebsd.org Received: from fedde.littleton.co.us (fedde.littleton.co.us [216.17.174.44]) by hub.freebsd.org (Postfix) with ESMTP id 75F6F37B6BD for ; Tue, 25 Apr 2000 20:16:35 -0700 (PDT) (envelope-from cfedde@fedde.littleton.co.us) Received: from fedde.littleton.co.us (localhost [127.0.0.1]) by fedde.littleton.co.us (8.10.0/8.10.0) with ESMTP id e3Q3GOi01208; Tue, 25 Apr 2000 21:16:24 -0600 (MDT) Message-Id: <200004260316.e3Q3GOi01208@fedde.littleton.co.us> To: Michael Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Need help reading my maillog In-Reply-To: From: Chris Fedde Date: Tue, 25 Apr 2000 21:16:24 -0600 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 25 Apr 2000 17:18:37 -0700 (PDT) Michael wrote: +------------------ | Apr 25 10:09:52 tucu sendmail[29625]: KAA29625: ruleset=check_mail, | arg1=, relay=lucy.fukuda.is.uec.ac.jp [130.153.154.151], reject=501 ... Sender domain must exist | Apr 25 10:09:52 tucu sendmail[29625]: KAA29625: from=, | size=0, class=0, pri=0, nrcpts=0, proto=ESMTP, | relay=lucy.fukuda.is.uec.ac.jp [130.153.154.151] | | Apr 25 13:46:42 tucu sendmail[29869]: NAA29869: ruleset=check_mail, | arg1=, relay=IDENT:root@olderman.analytic.ru | [212.5.87.200], reject=501 ... Sender domain must exist | Apr 25 13:46:42 tucu sendmail[29869]: NAA29869: from=, | size=0, class=0, pri=0, nrcpts=0, proto=ESMTP, | relay=IDENT:root@olderman.analytic.ru [212.5.87.200] +------------------ After looking at this closer I think that I have a better scenario of what is going on here. In the first case someone apparently at at lucy.fukuda.is.uec.ac.jp attempted to queue mail for mike1123@2hb.ne on tucu. That mail was rejected and no mail was ever queued. The second case is another occurance of the same thing from a different address. Are there any other records for either envelope? That both have the same from= is puzzling. I'm wondering if this is part of a probe from one of the mail spamming tools. good luck chris -- Chris Fedde 303 773 9134 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message