"Strange" maillog entries - am I being used as a relay?

From: Mike Pelley (mike_at_pelleys.com)
Date: 04/02/05

  • Next message: Mark Sargent: "Re: MPlayer Error" 
    Date: Sat, 02 Apr 2005 08:35:08 -0330
To: fedora-list@redhat.com

    Folks - I noticed some strange errors in my logwatch report and when I
    checked my maillog I found the entries below. I have SMTPS with TLS set
    up for authentication. Does this mean I'm being used as a relay?

    maillog:Mar 29 09:30:24 zeus postfix/smtpd[26863]: connect from
    unknown[216.113.195.131]
    maillog:Mar 29 09:30:24 zeus postfix/smtpd[26863]: setting up TLS
    connection from unknown[216.113.195.131]
    maillog:Mar 29 09:30:24 zeus postfix/smtpd[26863]: TLS connection
    established from unknown[216.113.195.131]: TLSv1 with cipher
    DHE-RSA-AES256-SHA (256/256 bits)
    maillog:Mar 29 09:30:25 zeus postfix/smtpd[26863]: 0A1267031D:
    client=unknown[216.113.195.131]
    maillog:Mar 29 09:30:25 zeus postfix/smtpd[26863]: 0A1267031D: reject:
    RCPT from unknown[216.113.195.131]: 450 <internal user>: User unknown in
    local recipient table; from=<> to=<internal User> proto=ESMTP
    helo=<email.noproblemnetworks.com>
    maillog:Mar 29 09:30:27 zeus postfix/smtpd[26863]: disconnect from
    unknown[216.113.195.131]

    Thanks,
    Mike 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Mark Sargent: "Re: MPlayer Error"

    Relevant Pages

    • "Strange" maillog entries - am I being used as a relay?
      ... Folks - I noticed some strange errors in my logwatch report and when I checked my maillog I found the entries below. ... I have SMTPS with TLS set up for authentication. ...
      (Fedora)
    • Re: Logs and how to read them
      ... Most items in maillog have 2 lines for each PID, ... transfered in that period - and i'll investigate suspicious entries. ... Fedora GNU/Linux Core 1 on Athlon CPU kernel 2.4.22-1.2179.nptl ...
      (Fedora)
    • Re: Redhat/Sendmail question
      ... the maillog file size is getting out of control. ... > when a piece of spam is detected. ... > There are thousand of those entries in the maillog. ... You can set it for daily rotation, size rotation, or others. ...
      (linux.redhat)