* Postfix User <postfix-users@postfix.org>:
> I hope this isn't too stupid of a question. I have been finding this event
> logged in maillog for the past several days:
> 
> Jul 16 08:50:38 scorpio postfix/smtpd[69563]: connect from 
> localhost[127.0.0.1]
> Jul 16 08:50:38 scorpio postfix/smtpd[69563]: warning: Illegal address syntax 
> from localhost[127.0.0.1] in MAIL command: <simon.schmidt@107.190.130.96>
> Jul 16 08:50:38 scorpio postfix/smtpd[69571]: connect from 
> localhost[127.0.0.1]
> Jul 16 08:50:38 scorpio postfix/smtpd[69571]: warning: Illegal address syntax 
> from localhost[127.0.0.1] in RCPT command: <simon.schmidt@107.190.130.96>
> Jul 16 08:50:38 scorpio postfix/smtpd[69571]: disconnect from 
> localhost[127.0.0.1] helo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
> 
> I am trying to figure out how this is connecting to the localhost or what
> is actually happening. 

It's connmection from localhost to localhost.

> Has my system been hacked or something? I don't believe anything has
> actually been sent out.

Of course nothing has been sent out; the syntax is incorrect:
simon.schmidt@107.190.130.96
mus be
simon.schmidt@[107.190.130.96]

I'd think 107.190.130.96 is the place to look at. Mabye some applicance?

-- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein

Reply via email to