From owner-freebsd-questions@FreeBSD.ORG  Sun Sep 26 21:04:02 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 59EFE106564A
	for <freebsd-questions@freebsd.org>;
	Sun, 26 Sep 2010 21:04:02 +0000 (UTC)
	(envelope-from prvs=0878c368f3=johnl@iecc.com)
Received: from gal.iecc.com (gal.iecc.com [64.57.183.53])
	by mx1.freebsd.org (Postfix) with ESMTP id EA3798FC15
	for <freebsd-questions@freebsd.org>;
	Sun, 26 Sep 2010 21:04:01 +0000 (UTC)
Received: (qmail 14322 invoked from network); 26 Sep 2010 20:37:20 -0000
Received: from mail1.iecc.com (64.57.183.56)
	by mail1.iecc.com with QMQP; 26 Sep 2010 20:37:20 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com;
	h=date:message-id:from:to:subject:in-reply-to:cc:mime-version:content-type:content-transfer-encoding;
	s=k1009; olt=johnl@user.iecc.com;
	bh=pQ1WkFfaKZXcVMBHpZRs2RFsCf4sEkPR3I6F9x0q7KU=;
	b=KG7lUOAxTcLRLMcgunAdcd7IpMAIbt5opNXtb2uv6RLsHH8WJbTmKGrHzoEufnZmM40zjnc0wNQz9g1fnE5WJsne6gKt4sNFSjjaVwHZGY9xs1uzR1Tm5g8p725b/K6HpZi2fEBdLl14xZqz0A0k5Sg3IjKl6PufBqO8zkTu2ug=
Date: 26 Sep 2010 20:37:20 -0000
Message-ID: <20100926203720.66674.qmail@joyce.lan>
From: John Levine <johnl@iecc.com>
To: freebsd-questions@freebsd.org
In-Reply-To: <20100926182200.GA40516@thought.org>
Organization: 
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset=utf-8
Content-transfer-encoding: 7bit
Cc: kline@magnesium.net
Subject: Re: /var/log/maillog
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 26 Sep 2010 21:04:02 -0000

>Sep 26 11:13:47 ethic dovecot: imap-login: Login: user=<kline>, method=PLAIN,
>rip=10.47.0.230, lip=10.47.0.230, TLS
>Sep 26 11:14:48 ethic dovecot: IMAP(kline): Connection closed bytes=824/490

OK, you logged in, checked your mail, and logged out.

>Sep 26 11:15:07 ethic sm-mta[15070]: ruleset=check_relay, arg1=109.106.10.75.sumtel.ua,
>arg2=127.0.0.4, relay=109.106.10.75.sumtel.ua [109.106.10.75], reject=550 5.7.1 Rejected:
>109.106.10.75 listed at sbl-xbl.spamhaus.org
>p1 11:15 <ethic> [4598]                                 

A 'bot in the Ukraine attempted to send mail, and your MTA rejected it
since it was blacklisted.

Those entries are all perfectly normal.  

Not to belabor the obvious, but you need to tell us what you did, what
you expected to happen, what happened instead, and the log entries
showing what was going on while it happened.

R's,
John