Alex:
> I'm receiving messages similar to the following on three mail servers
> on two separate networks with postfix-2.9:
>
> Dec 24 11:33:10 mail02 postfix/smtpd[8603]: too many errors after DATA
> from unknown[23.92.90.231]
> Dec 24 11:48:06 mail01 postfix/smtpd[14470]: too many errors after
> RCPT from mail.virtualarmor.com[64.92.219.81]
>
> I've researched the smtp_*_error_limit variables and people's
> recommendations to adjust them, but I don't understand why they are
> being generated. Could it at all be related to sqlgrey?
This almost certainly means that the remote SMTP client sent
<CR><LF>.<CR><LF> in the middle of the message content. From then
on, the SMTP server must process every input line as an SMTP command.
The result is that message content is processed as SMTP commands.
There is a mail server at 64.92.219.81 that claims to be Postfix,
but that doesn't mean that the message actually came from that
server (64.92.219.81 could be a network address translator that is
shared by multiple systems).
Wietse
