David wrote:
Hi list,
I have been running the Shupp Toaster for some time. My current version is
0.7.10, running on redhat 9.
I have been receiving a few entries in my qmail log which appear a little
dubious to me. They look like the following example, taken from today:
# tail /var/log/qmail/current | tai64nlocal
[snip]
2005-06-08 15:33:07.619543500 info msg 8225097: bytes 2214 from <> qp 28395
uid 89
2005-06-08 15:33:07.639654500 starting delivery 7816: msg 8225097 to remote
[EMAIL PROTECTED]
2005-06-08 15:33:07.639657500 status: local 0/10 remote 1/20
2005-06-08 15:33:13.133576500 delivery 7816: failure:
Connected_to_[a_remote_ip]_but_sender_was_rejected./Remote_host_said:_501_#2
175005_Syntax_error_in_parameters_or_arguments/
[/snip]
The only substitutions I to the above were:
- substituted domain of hill.h@ email address for [domain]
- substituted the remote ip address for [a_remote_ip]
both to protect the innocent...
My concern is that to me, this log reads as though some outside party
attempted to send a mal-formed message without a return address field
through our mailserver, and succeeded. It appears that it was up to the
destination mailserver to drop the message (for some reason)... if this is
true, then wouldn't this mean unwanted parties can relay through our server
by doing whatever was done here? It looks like the relay succeeded, but the
remote server simply didn't like the message... if something shows up in
their logs, they will have record that the message came through my server
no?
Any advice would be much appreciated, as this has me a little worried...
Hi,
Looks like a bounce to me from the
info msg 8225097: bytes 2214 from <> qp 28395 uid 89
part. Probably a user over quota.
Regards,
Rick
