On Tue, Mar 16, 2010 at 11:41 AM, Patric Falinder <patric.falin...@omg.nu> wrote: > I just noticed that I had a lot of these messages in my logs and was just > wondering what they were: > > Mar 16 16:34:02 sexan postfix/smtpd[25331]: connect from unknown[unknown] > Mar 16 16:34:02 sexan postfix/smtpd[25331]: lost connection after CONNECT > from unknown[unknown] > Mar 16 16:34:02 sexan postfix/smtpd[25331]: disconnect from unknown[unknown] > > How do I get these? Someone is trying to connect from a unknown address but > is losing the connection immediately and gets disconnected. > Why does it say that its a connection from "unknown"? Shouldn't I be able to > see who's connecting to me? > Is it possible that a spamer is trying to take advantage of my server or > something somehow? > > > Thanks >
Do you have a monitoring tool in your network? Maybe it's a Nagios testing your smtp server. That also happens to me in my loadbalancer, keepalived test smtp port with a telnet and then disconnects and i have a lot of this message in my logs too. Is there a way to avoid this? PS: It's not for spam.
