On Mar 30, 2010, at 3:05 PM, Sahil Tandon wrote: > On Tue, 30 Mar 2010, Terry Barnum wrote: > >>>> $ grep 'lost connection' /var/log/mail.log >>>> <snip> >>>> Mar 30 05:07:14 mail postfix/smtpd[45236]: lost connection after DATA from >>>> unknown[123.28.125.3] >>>> Mar 30 05:07:17 mail postfix/smtpd[45244]: lost connection after DATA from >>>> unknown[62.32.223.28] >>>> Mar 30 05:07:18 mail postfix/smtpd[45240]: lost connection after RCPT from >>>> public16037.xdsl.centertel.pl[79.163.62.165] >>>> Mar 30 05:07:18 mail postfix/smtpd[45159]: lost connection after RCPT from >>>> unknown[218.157.167.131] >>>> Mar 30 05:07:20 mail postfix/smtpd[45188]: lost connection after CONNECT >>>> from unknown[212.63.221.10] >>>> Mar 30 05:07:23 mail postfix/smtpd[45230]: lost connection after RCPT from >>>> mproxy01.jheel.bdcom.com[210.4.76.3] >>>> Mar 30 05:07:25 mail postfix/smtpd[45229]: lost connection after DATA from >>>> unknown[119.15.93.218] >>>> Mar 30 05:07:27 mail postfix/smtpd[45237]: lost connection after RCPT from >>>> unknown[213.198.111.207] >> >> Other ideas why those clients didn't get rejected before DATA? > > Some of the above IPs were listed on zen in the last 9-12 hours, so > perhaps that is why they slipped by?
Ahh, good point Sahil. Thanks. -Terry
