- <[EMAIL PROTECTED]>:
| I'm running qmail on my little Linux box with a couple of folks using it
| as there postoffice. I've noticed in the maillog a continueing entry
| for messages to someone called "[EMAIL PROTECTED]". The qmail pop logs:
| "Sorry_I_couldn't_find_any_host_by_that_name._(#4.1.2)/".
|
| So, what's happening? Who's the smart guy?
That information is also in the logs. Look in the logs for the line
saying "delivery zzzz: msg yyyy to remote [EMAIL PROTECTED]". Then
search backwards from this point in the log for "info msg yyyy: bytes
nnn from <address> qp qqqq uid uuuu". The <address> is the envelope
sender. If the "uid uuuu" points to a local user, you may have your
smart guy. If it's the uid of the alias user, you need to trace the
message back through alias expansion. If it's the uid of qmaild, the
message probably came in from the net. If so, you are running an open
relay, and should close it up. Create /var/qmail/control/rcpthosts
(man qmail-smtpd) and follow FAQ 5.4 if you need to allow relaying
from some hosts.
- Harald
