From owner-freebsd-questions@FreeBSD.ORG Thu Apr 29 09:59:46 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AEBAC16A4CE for ; Thu, 29 Apr 2004 09:59:46 -0700 (PDT) Received: from internet.potentialtech.com (h-66-167-251-6.phlapafg.covad.net [66.167.251.6]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6B4E043D45 for ; Thu, 29 Apr 2004 09:59:46 -0700 (PDT) (envelope-from wmoran@potentialtech.com) Received: from potentialtech.com (pa-plum1c-102.pit.adelphia.net [24.53.179.102]) by internet.potentialtech.com (Postfix) with ESMTP id 961D369A81; Thu, 29 Apr 2004 12:59:45 -0400 (EDT) Message-ID: <409133F3.4030009@potentialtech.com> Date: Thu, 29 Apr 2004 12:57:23 -0400 From: Bill Moran User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.6) Gecko/20040422 X-Accept-Language: en-us, en MIME-Version: 1.0 To: samy lancher References: <20040429163930.13764.qmail@web60301.mail.yahoo.com> In-Reply-To: <20040429163930.13764.qmail@web60301.mail.yahoo.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-questions@freebsd.org Subject: Re: Weird messages in daily run report. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Apr 2004 16:59:46 -0000 samy lancher wrote: > Hello, > I have a freeBSD 4.7, sendmail server. I use both IMAP, squrrielmail and POP3, outlook. > Today i got very strange messages under "Checking for rejected mail hosts:" section in > my daily run report . Everyday I used to get 3 to 4 messages in this section but today > i recevied alot. Lately the users are receiving lot of virus emails too. Is there some > thing i need to worry about?. Below are the messages i got in todays daily report. These messages mean your mail server is refusing to relay mail for the servers listed. It's most likely someone hoping to hijack your server to relay spam. The fact that they're failing is A Good Thing. > > mail in local queue: > /var/spool/mqueue is empty > Total requests: 0 > Mail in submit queue: > /var/spool/clientmqueue is empty > Total requests: 0 > Security check: > (output mailed separately) > Checking for rejected mail hosts: > 4 CORNERSTONE.COMSMTPNEMETHL > 2 cor__recip_version1.0_ > 2 168.com > 1 tuftsr > 1 mocke > 1 relay.us.dnb.com > 1 oh-design.com__recip_version1.0_ > 1 oh-design.com6 > 1 oh-design.c__recip_version1.0_ > 1 machiavelli.synacor.com > 1 hertzcom.hertz.com > 1 hertz__substg1.0_1035001E > 1 heci.c__substg1.0_3003001E > 1 gateway.2wire.net > 1 dfw.cnsx.com > 1 cornerstone__recip_version1.0_ > 1 cornerstone.comSubject > 1 cornerstone.comSMTPsacsup > 1 cornerstone.comSMTPgilest > 1 cornerstone.comSMTProbertst > 1 cornerstone.comSMTProbertse__substg1.0_300B0102 > 1 cornerstone.comSMTProbertse > 1 cornerstone.c__substg1.0_0FFF0102 > 1 cornerstone.c__substg1.0_001A001E > 1 cornerstone.c__recip_version1.0_ > 1 cornerstone.__recip_version1.0_ > 1 cornerstone__substg1.0_00430102 > 1 corners__substg1.0_300B0102 > 1 cor__substg1.0_300B0102 > 1 c__substg1.0_300B0102 > 1 c__substg1.0_0E1D001E > 1 RxMore03.com > 1 OUTGOING64.myaccountemail.com > 1 OUTGOING136.myaccountemail.com > 1 CONERSTONE.COM > 1 6g4563q6f.com > 1 247MedsRx.com > 1 01C3504B.0E63 > 1 01C34952.33BA5020 > 1 01C33A5C.E217F910 > 1 01C31338.33CDAF80 > 1 01C30B51.824E1E40 > 1 01C2F79E.CFBBCCC0 > 1 01C2EEDD.5769A680 > 1 01C2D379.BEBF5930 > 1 01C2D288.B62CF4E0 > 1 01C2CCF8.78098240 > 1 01C2CCF4.5FBB1D60 > 1 01C2CCF3.6A077CB0 -- Bill Moran Potential Technologies http://www.potentialtech.com