Topic: Incoming Emails not coming in...

[Jasonuocs]

Hi all,
Quick low down...
Ver 6.01
Server Only
multi-drop set to collect every 5 mins

Software installed...
Swerts AV
Swerts SpamAssassin
Swerts Sys Monitor
Swerts User Vacations installed

Problem
I have been receiving emails up until Saturday when SME server just appeared to stop! now I am not sure which logs to check first! and if I did I am not sure they will make much sense to me...
I have updated the Swerts AV & SpamAssassin today in hope to cure the problem no such luck.

I have checked there are emails in my servers pop box which there are over 1000...

Not much to go on I know but if someone could point me in the right direction as where to look...

Thanks
Jason

[smeghead]

check the messages log for fetchmail errors and also look in the maillog for clues

[Jasonuocs]

Thanks for the pointers Smeghead,

My messages log has this....
Jul 12 07:57:35 mailserver HORDE[2112]: [imp] Logout for paul@dunns-ls.co.uk [80.168.134.157] from {localhost:143} [on line 34 of "/home/httpd/html/horde/imp/login.php"]
Jul 12 08:00:00 mailserver su(pam_unix)[749]: session opened for user qmailr by (uid=0)
Jul 12 08:00:03 mailserver last message repeated 8 times
Jul 12 08:03:19 mailserver HORDE[2121]: [imp] Login success for paul@dunns-ls.co.uk [80.168.134.157] to {localhost:143} [on line 83 of "/home/httpd/html/horde/imp/redirect.php"]
Jul 12 08:05:00 mailserver su(pam_unix)[1097]: session opened for user qmailr by (uid=0)
Jul 12 08:05:01 mailserver su(pam_unix)[1097]: session closed for user qmailr
Jul 12 08:05:09 mailserver last message repeated 8 times
Jul 12 08:05:16 mailserver su(pam_unix)[749]: session closed for user qmailr

and this is my maillog...
Jul 12 08:15:37 mailserver spamd[1414]: server hit by SIGCHLD
Jul 12 08:15:37 mailserver spamd[1414]: handled cleanup of child pid 12428
Jul 12 08:15:37 mailserver spamd[1414]: server successfully spawned child process, pid 1677
Jul 12 08:15:47 mailserver spamd[17935]: connection from localhost [127.0.0.1] at port 41606
Jul 12 08:15:47 mailserver spamd[17935]: info: setuid to qmailq succeeded
Jul 12 08:15:47 mailserver spamd[17935]: processing message <110571DA1FEBD711A84500D0B7654D8C03A35F70@gds_ser_01> for qmailq:404.
Jul 12 08:15:53 mailserver spamd[17935]: clean message (-0.8/2.0) for qmailq:404 in 6.3 seconds, 4210 bytes.
Jul 12 08:15:53 mailserver spamd[17935]: result: .  0 - AWL,BAYES_00,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK scantime=6.3,size=4210,mid=<110571DA1FEBD711A84500D0B7654D8C03A35F70@gds_ser_01>,bayes=0,autolearn=no
Jul 12 08:16:05 mailserver spamd[14321]: connection from localhost [127.0.0.1] at port 41609
Jul 12 08:16:05 mailserver spamd[14321]: info: setuid to qmailq succeeded
Jul 12 08:16:05 mailserver spamd[14321]: processing message <0IJE00CBXUVPIV00@l-daemon> for qmailq:404.
Jul 12 08:16:13 mailserver spamd[14321]: clean message (0.6/2.0) for qmailq:404 in 8.0 seconds, 9199 bytes.
Jul 12 08:16:13 mailserver spamd[14321]: result: .  0 - AWL,BAYES_00,DOMAIN_4U2,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK scantime=8.0,size=9199,mid=<0IJE00CBXUVPIV00@l-daemon>,bayes=1.66533453693773e-16,autolearn=no
Jul 12 08:16:25 mailserver spamd[31194]: connection from localhost [127.0.0.1] at port 41612
Jul 12 08:16:25 mailserver spamd[31194]: info: setuid to qmailq succeeded
Jul 12 08:16:25 mailserver spamd[31194]: processing message <2tG5TrvfF00009842@swiss.nwswissmatic.local> for qmailq:404.
Jul 12 08:16:31 mailserver spamd[31194]: clean message (-1.0/2.0) for qmailq:404 in 6.1 seconds, 4124 bytes.
Jul 12 08:16:31 mailserver spamd[31194]: result: . -1 - AWL,BAYES_00,NO_REAL_NAME,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK scantime=6.1,size=4124,mid=<2tG5TrvfF00009842@swiss.nwswissmatic.local>,bayes=4.9960036108132e-16,autolearn=no
Jul 12 08:16:42 mailserver spamd[27486]: connection from localhost [127.0.0.1] at port 41615
Jul 12 08:16:42 mailserver spamd[27486]: info: setuid to qmailq succeeded
Jul 12 08:16:43 mailserver spamd[27486]: processing message <0IJE008G4V1PT200@msg-mx1.usc.edu> for qmailq:404.
Jul 12 08:16:49 mailserver spamd[27486]: clean message (1.5/2.0) for qmailq:404 in 6.9 seconds, 4314 bytes.
Jul 12 08:16:49 mailserver spamd[27486]: result: .  1 - AMATEUR_PORN,AWL,BAYES_00,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,WHY_WAIT scantime=6.9,size=4314,mid=<0IJE008G4V1PT200@msg-mx1.usc.edu>,bayes=1.32782673745169e-13,autolearn=no
Jul 12 08:17:00 mailserver spamd[1677]: connection from localhost [127.0.0.1] at port 41618
Jul 12 08:17:02 mailserver spamd[1677]: info: setuid to qmailq succeeded
Jul 12 08:17:05 mailserver spamd[1677]: processing message <gJKVApwOL00001ccf@mail.outreachseniorhealthcare.com> for qmailq:404.
Jul 12 08:17:13 mailserver spamd[1677]: identified spam (4.2/2.0) for qmailq:404 in 12.3 seconds, 3657 bytes.
Jul 12 08:17:13 mailserver spamd[1677]: result: Y  4 - AWL,BAYES_50,DRUGS_ERECTILE,MORE_SEX,NO_REAL_NAME,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK scantime=12.3,size=3657,mid=<gJKVApwOL00001ccf@mail.outreachseniorhealthcare.com>,bayes=0.499775773982387,autolearn=no
Jul 12 08:17:24 mailserver spamd[17935]: connection from localhost [127.0.0.1] at port 41621
Jul 12 08:17:24 mailserver spamd[17935]: info: setuid to qmailq succeeded
Jul 12 08:17:24 mailserver spamd[17935]: processing message <200507101212.j6ACCCP25302@userone.serve.co.uk> for qmailq:404.
Jul 12 08:17:31 mailserver spamd[17935]: clean message (0.7/2.0) for qmailq:404 in 7.2 seconds, 3200 bytes.
Jul 12 08:17:31 mailserver spamd[17935]: result: .  0 - AWL,BAYES_00,MSGID_FROM_MTA_HEADER,MSGID_FROM_MTA_ID,NO_REAL_NAME,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK scantime=7.2,size=3200,mid=<200507101212.j6ACCCP25302@userone.serve.co.uk>,bayes=3.33066907387547e-16,autolearn=no
 Refresh this logfile

Does this mean my spam filter is being over zelous? I cant really see anything wrong in these that point to anything and to me it actually looks like it is receiving the emails! It's just that there not getting into the users mailboxes...

Any help is very much appreciated.

Thanks
Jason

[smeghead]

.. the maillog file seems fine, just spamassassin doing its job.  Fire up Midnight Commander (mc at prompt) and open up the messages log and search for fetchmail, otherwise run:

cat /var/log/messages | grep fetchmail

to get a listing to the screen of any fetchmail references in the log file; report any errors.

HTH

[Jasonuocs]

Thanks again, This is much appreciated...

I believe looking at the users inboxes it stopped receiving mail on the 10th here is the whole message log file might be a bit big but I hope you might see something in here...

Jul  8 01:12:20 mailserver syslogd 1.4.1: restart.
Jul  8 01:12:20 mailserver e-smith[27565]: S65reload-syslogd=action|Event|logrotate|Action|S65reload-syslogd|Start|1120785138 251584|End|1120785140 282504|Elapsed|2.03092
Jul  8 01:12:20 mailserver e-smith[27565]: Running event handler: /etc/e-smith/events/logrotate/S65restart-httpd-graceful
Jul  8 01:12:23 mailserver httpd-e-smith: httpd -USR1 succeeded
Jul  8 01:12:29 mailserver e-smith[27565]: Gracefully reloading httpd: [   OK   ]^M
Jul  8 01:12:29 mailserver e-smith[27565]: S65restart-httpd-graceful=action|Event|logrotate|Action|S65restart-httpd-graceful|Start|1120785140 283376|End|1120785149 282499|Elapsed|8.999123
Jul  8 01:12:29 mailserver e-smith[27565]: Running event handler: /etc/e-smith/events/logrotate/S70reload-httpd-admin
Jul  8 01:12:32 mailserver httpd-admin: httpd-admin -USR1 succeeded
Jul  8 01:12:32 mailserver e-smith[27565]: Gracefully reloading e-smith httpd-admin: [   OK   ]^M
Jul  8 01:12:32 mailserver e-smith[27565]: S70reload-httpd-admin=action|Event|logrotate|Action|S70reload-httpd-admin|Start|1120785149 283430|End|1120785152 195149|Elapsed|2.911719
Jul  8 01:12:32 mailserver e-smith[27565]: Running event handler: /etc/e-smith/events/logrotate/S75purge-old-logs
Jul  8 01:12:33 mailserver e-smith[27565]: S75purge-old-logs=action|Event|logrotate|Action|S75purge-old-logs|Start|1120785152 196047|End|1120785153 71985|Elapsed|0.875938
Jul  8 01:15:00 mailserver su(pam_unix)[27709]: session opened for user qmailr by (uid=0)
Jul  8 01:15:03 mailserver ucd-snmp[1937]: Connection from 127.0.0.1
Jul  8 01:16:45 mailserver su(pam_unix)[27709]: session closed for user qmailr
Jul  8 01:20:00 mailserver su(pam_unix)[27915]: session opened for user qmailr by (uid=0)
Jul  8 01:20:03 mailserver last message repeated 8 times
Jul  8 01:22:22 mailserver su(pam_unix)[27915]: session closed for user qmailr
Jul  8 01:25:00 mailserver su(pam_unix)[28185]: session opened for user qmailr by (uid=0)
Jul  8 01:25:05 mailserver last message repeated 8 times
Jul  8 01:27:01 mailserver su(pam_unix)[28185]: session closed for user qmailr
Jul  8 01:30:00 mailserver su(pam_unix)[28403]: session opened for user qmailr by (uid=0)
Jul  8 01:30:03 mailserver last message repeated 8 times
Jul  8 01:32:24 mailserver su(pam_unix)[28403]: session closed for user qmailr
Jul  8 01:35:00 mailserver su(pam_unix)[28663]: session opened for user qmailr by (uid=0)
Jul  8 01:35:03 mailserver last message repeated 8 times
Jul  8 01:36:41 mailserver su(pam_unix)[28663]: session closed for user qmailr
Jul  8 01:40:00 mailserver su(pam_unix)[28875]: session opened for user qmailr by (uid=0)
Jul  8 01:40:03 mailserver last message repeated 8 times
Jul  8 01:41:58 mailserver su(pam_unix)[28875]: session closed for user qmailr
Jul  8 01:45:00 mailserver su(pam_unix)[29082]: session opened for user qmailr by (uid=0)
Jul  8 01:45:03 mailserver last message repeated 8 times
Jul  8 01:47:00 mailserver su(pam_unix)[29082]: session closed for user qmailr
Jul  8 01:50:00 mailserver su(pam_unix)[29304]: session opened for user qmailr by (uid=0)
Jul  8 01:50:04 mailserver last message repeated 8 times
Jul  8 01:51:23 mailserver su(pam_unix)[29304]: session closed for user qmailr
Jul  8 01:55:00 mailserver su(pam_unix)[29491]: session opened for user qmailr by (uid=0)
Jul  8 01:55:03 mailserver last message repeated 8 times
Jul  8 01:57:20 mailserver su(pam_unix)[29491]: session closed for user qmailr
Jul  8 02:00:00 mailserver su(pam_unix)[29736]: session opened for user qmailr by (uid=0)
Jul  8 02:00:03 mailserver last message repeated 8 times
Jul  8 02:01:51 mailserver su(pam_unix)[29736]: session closed for user qmailr
Jul  8 02:05:00 mailserver su(pam_unix)[29957]: session opened for user qmailr by (uid=0)
Jul  8 02:05:03 mailserver last message repeated 8 times
Jul  8 02:06:22 mailserver su(pam_unix)[29957]: session closed for user qmailr
Jul  8 02:10:01 mailserver su(pam_unix)[30181]: session opened for user qmailr by (uid=0)
Jul  8 02:10:04 mailserver last message repeated 8 times
Jul  8 02:11:34 mailserver su(pam_unix)[30181]: session closed for user qmailr
Jul  8 02:15:00 mailserver su(pam_unix)[30385]: session opened for user qmailr by (uid=0)
Jul  8 02:15:03 mailserver last message repeated 8 times
Jul  8 02:16:23 mailserver su(pam_unix)[30385]: session closed for user qmailr
Jul  8 02:20:00 mailserver su(pam_unix)[30594]: session opened for user qmailr by (uid=0)
Jul  8 02:20:04 mailserver last message repeated 8 times
Jul  8 02:21:33 mailserver su(pam_unix)[30594]: session closed for user qmailr
Jul  8 02:25:01 mailserver su(pam_unix)[30786]: session opened for user qmailr by (uid=0)
Jul  8 02:25:04 mailserver last message repeated 8 times
Jul  8 02:26:46 mailserver su(pam_unix)[30786]: session closed for user qmailr
Jul  8 02:30:01 mailserver su(pam_unix)[31004]: session opened for user qmailr by (uid=0)
Jul  8 02:30:04 mailserver last message repeated 8 times
Jul  8 02:31:51 mailserver su(pam_unix)[31004]: session closed for user qmailr
Jul  8 02:35:00 mailserver su(pam_unix)[31276]: session opened for user qmailr by (uid=0)
Jul  8 02:35:03 mailserver last message repeated 8 times
Jul  8 02:37:35 mailserver su(pam_unix)[31276]: session closed for user qmailr
Jul  8 02:40:00 mailserver su(pam_unix)[31600]: session opened for user qmailr by (uid=0)
Jul  8 02:40:03 mailserver last message repeated 8 times
Jul  8 02:41:23 mailserver su(pam_unix)[31600]: session closed for user qmailr
Jul  8 02:45:01 mailserver su(pam_unix)[31854]: session opened for user qmailr by (uid=0)
Jul  8 02:45:04 mailserver last message repeated 8 times
Jul  8 02:46:25 mailserver su(pam_unix)[31854]: session closed for user qmailr
Jul  8 02:50:00 mailserver su(pam_unix)[32069]: session opened for user qmailr by (uid=0)
Jul  8 02:50:03 mailserver last message repeated 8 times
Jul  8 02:51:50 mailserver su(pam_unix)[32069]: session closed for user qmailr
Jul  8 02:55:01 mailserver su(pam_unix)[32305]: session opened for user qmailr by (uid=0)
Jul  8 02:55:04 mailserver last message repeated 8 times
Jul  8 02:57:11 mailserver su(pam_unix)[32305]: session closed for user qmailr
Jul  8 03:00:00 mailserver su(pam_unix)[32544]: session opened for user qmailr by (uid=0)
Jul  8 03:00:04 mailserver last message repeated 8 times
Jul  8 03:01:52 mailserver su(pam_unix)[32544]: session closed for user qmailr
Jul  8 03:05:01 mailserver su(pam_unix)[32767]: session opened for user qmailr by (uid=0)
Jul  8 03:05:04 mailserver last message repeated 8 times
Jul  8 03:06:43 mailserver su(pam_unix)[32767]: session closed for user qmailr
Jul  8 03:10:01 mailserver su(pam_unix)[570]: session opened for user qmailr by (uid=0)
Jul  8 03:10:04 mailserver last message repeated 8 times
Jul  8 03:12:29 mailserver su(pam_unix)[570]: session closed for user qmailr
Jul  8 03:15:00 mailserver su(pam_unix)[830]: session opened for user qmailr by (uid=0)
Jul  8 03:15:03 mailserver last message repeated 8 times
Jul  8 03:16:58 mailserver su(pam_unix)[830]: session closed for user qmailr
Jul  8 03:20:00 mailserver su(pam_unix)[1059]: session opened for user qmailr by (uid=0)
Jul  8 03:20:04 mailserver last message repeated 8 times
Jul  8 03:21:55 mailserver su(pam_unix)[1059]: session closed for user qmailr
Jul  8 03:25:01 mailserver su(pam_unix)[1312]: session opened for user qmailr by (uid=0)
Jul  8 03:25:04 mailserver last message repeated 8 times
Jul  8 03:27:31 mailserver su(pam_unix)[1312]: session closed for user qmailr
Jul  8 03:30:00 mailserver su(pam_unix)[1555]: session opened for user qmailr by (uid=0)
Jul  8 03:30:03 mailserver last message repeated 8 times
Jul  8 03:31:32 mailserver su(pam_unix)[1555]: session closed for user qmailr
Jul  8 03:35:00 mailserver su(pam_unix)[1772]: session opened for user qmailr by (uid=0)
Jul  8 03:35:03 mailserver last message repeated 8 times
Jul  8 03:37:37 mailserver su(pam_unix)[1772]: session closed for user qmailr
Jul  8 03:40:01 mailserver su(pam_unix)[2067]: session opened for user qmailr by (uid=0)
Jul  8 03:40:04 mailserver last message repeated 8 times
Jul  8 03:43:09 mailserver su(pam_unix)[2067]: session closed for user qmailr
Jul  8 03:45:00 mailserver su(pam_unix)[2358]: session opened for user qmailr by (uid=0)
Jul  8 03:45:04 mailserver last message repeated 8 times
Jul  8 03:46:34 mailserver su(pam_unix)[2358]: session closed for user qmailr
Jul  8 03:50:00 mailserver su(pam_unix)[2562]: session opened for user qmailr by (uid=0)
Jul  8 03:50:04 mailserver last message repeated 8 times
Jul  8 03:51:33 mailserver su(pam_unix)[2562]: session closed for user qmailr
Jul  8 03:55:00 mailserver su(pam_unix)[2764]: session opened for user qmailr by (uid=0)
Jul  8 03:55:03 mailserver last message repeated 8 times
Jul  8 03:56:59 mailserver su(pam_unix)[2764]: session closed for user qmailr
Jul  8 04:00:00 mailserver su(pam_unix)[2998]: session opened for user qmailr by (uid=0)
Jul  8 04:00:03 mailserver last message repeated 8 times
Jul  8 04:02:42 mailserver su(pam_unix)[2998]: session closed for user qmailr
Jul  8 04:05:00 mailserver su(pam_unix)[3428]: session opened for user qmailr by (uid=0)
Jul  8 04:05:03 mailserver last message repeated 8 times
Jul  8 04:07:51 mailserver su(pam_unix)[3428]: session closed for user qmailr
Jul  8 04:10:00 mailserver su(pam_unix)[3707]: session opened for user qmailr by (uid=0)
Jul  8 04:10:03 mailserver last message repeated 8 times
Jul  8 04:12:01 mailserver su(pam_unix)[3707]: session closed for user qmailr
Jul  8 04:15:00 mailserver su(pam_unix)[3940]: session opened for user qmailr by (uid=0)
Jul  8 04:15:03 mailserver last message repeated 8 times
Jul  8 04:16:30 mailserver su(pam_unix)[3940]: session closed for user qmailr
Jul  8 04:20:00 mailserver su(pam_unix)[4159]: session opened for user qmailr by (uid=0)
Jul  8 04:20:04 mailserver last message repeated 8 times
Jul  8 04:21:57 mailserver su(pam_unix)[4159]: session closed for user qmailr
Jul  8 04:25:01 mailserver su(pam_unix)[4358]: session opened for user qmailr by (uid=0)
Jul  8 04:25:04 mailserver last message repeated 8 times
Jul  8 04:26:22 mailserver su(pam_unix)[4358]: session closed for user qmailr
Jul  8 04:30:01 mailserver su(pam_unix)[4548]: session opened for user qmailr by (uid=0)
Jul  8 04:30:04 mailserver last message repeated 8 times
Jul  8 04:31:33 mailserver su(pam_unix)[4548]: session closed for user qmailr
Jul  8 04:35:00 mailserver su(pam_unix)[4727]: session opened for user qmailr by (uid=0)
Jul  8 04:35:04 mailserver last message repeated 8 times
Jul  8 04:37:01 mailserver su(pam_unix)[4727]: session closed for user qmailr
Jul  8 04:40:00 mailserver su(pam_unix)[4959]: session opened for user qmailr by (uid=0)
Jul  8 04:40:04 mailserver last message repeated 8 times
Jul  8 04:41:55 mailserver su(pam_unix)[4959]: session closed for user qmailr
Jul  8 04:45:00 mailserver su(pam_unix)[5184]: session opened for user qmailr by (uid=0)
Jul  8 04:45:03 mailserver last message repeated 8 times
Jul  8 04:47:29 mailserver su(pam_unix)[5184]: session closed for user qmailr
Jul  8 04:50:01 mailserver su(pam_unix)[5463]: session opened for user qmailr by (uid=0)
Jul  8 04:50:04 mailserver last message repeated 8 times
Jul  8 04:52:59 mailserver su(pam_unix)[5463]: session closed for user qmailr
Jul  8 04:55:00 mailserver su(pam_unix)[5733]: session opened for user qmailr by (uid=0)
Jul  8 04:55:03 mailserver last message repeated 8 times
Jul  8 04:56:23 mailserver su(pam_unix)[5733]: session closed for user qmailr
Jul  8 05:00:00 mailserver su(pam_unix)[5925]: session opened for user qmailr by (uid=0)
Jul  8 05:00:03 mailserver last message repeated 8 times
Jul  8 05:00:04 mailserver su(pam_unix)[5925]: session closed for user qmailr
Jul  8 05:05:01 mailserver su(pam_unix)[6106]: session opened for user qmailr by (uid=0)
Jul  8 05:05:04 mailserver last message repeated 8 times
Jul  8 05:07:19 mailserver su(pam_unix)[6106]: session closed for user qmailr
Jul  8 05:10:01 mailserver su(pam_unix)[6378]: session opened for user qmailr by (uid=0)
Jul  8 05:10:04 mailserver last message repeated 8 times
Jul  8 05:11:59 mailserver su(pam_unix)[6378]: session closed for user qmailr
Jul  8 05:15:00 mailserver su(pam_unix)[6600]: session opened for user qmailr by (uid=0)
Jul  8 05:15:04 mailserver last message repeated 8 times
Jul  8 05:16:31 mailserver su(pam_unix)[6600]: session closed for user qmailr
Jul  8 05:20:00 mailserver su(pam_unix)[6801]: session opened for user qmailr by (uid=0)
Jul  8 05:20:04 mailserver last message repeated 8 times
Jul  8 05:22:41 mailserver su(pam_unix)[6801]: session closed for user qmailr
Jul  8 05:25:00 mailserver su(pam_unix)[7076]: session opened for user qmailr by (uid=0)
Jul  8 05:25:03 mailserver last message repeated 8 times
Jul  8 05:27:24 mailserver su(pam_unix)[7076]: session closed for user qmailr
Jul  8 05:30:00 mailserver su(pam_unix)[7349]: session opened for user qmailr by (uid=0)
Jul  8 05:30:04 mailserver last message repeated 8 times
Jul  8 05:32:10 mailserver su(pam_unix)[7349]: session closed for user qmailr
Jul  8 05:35:00 mailserver su(pam_unix)[7591]: session opened for user qmailr by (uid=0)
Jul  8 05:35:03 mailserver last message repeated 8 times
Jul  8 05:36:44 mailserver su(pam_unix)[7591]: session closed for user qmailr
Jul  8 05:40:00 mailserver su(pam_unix)[7789]: session opened for user qmailr by (uid=0)
Jul  8 05:40:03 mailserver last message repeated 8 times
Jul  8 05:42:01 mailserver su(pam_unix)[7789]: session closed for user qmailr
Jul  8 05:45:00 mailserver su(pam_unix)[8023]: session opened for user qmailr by (uid=0)
Jul  8 05:45:03 mailserver last message repeated 8 times
Jul  8 05:46:22 mailserver su(pam_unix)[8023]: session closed for user qmailr
Jul  8 05:50:01 mailserver su(pam_unix)[8215]: session opened for user qmailr by (uid=0)
Jul  8 05:50:04 mailserver last message repeated 8 times
Jul  8 05:52:12 mailserver su(pam_unix)[8215]: session closed for user qmailr
Jul  8 05:55:00 mailserver su(pam_unix)[8458]: session opened for user qmailr by (uid=0)
Jul  8 05:55:04 mailserver last message repeated 8 times
Jul  8 05:56:51 mailserver su(pam_unix)[8458]: session closed for user qmailr
Jul  8 06:00:00 mailserver su(pam_unix)[8700]: session opened for user qmailr by (uid=0)
Jul  8 06:00:04 mailserver last message repeated 8 times
Jul  8 06:01:52 mailserver su(pam_unix)[8700]: session closed for user qmailr
Jul  8 06:05:00 mailserver su(pam_unix)[8911]: session opened for user qmailr by (uid=0)
Jul  8 06:05:04 mailserver last message repeated 8 times
Jul  8 06:06:23 mailserver su(pam_unix)[8911]: session closed for user qmailr
Jul  8 06:10:00 mailserver su(pam_unix)[9101]: session opened for user qmailr by (uid=0)
Jul  8 06:10:03 mailserver last message repeated 8 times
Jul  8 06:12:30 mailserver su(pam_unix)[9101]: session closed for user qmailr
Jul  8 06:15:00 mailserver su(pam_unix)[9377]: session opened for user qmailr by (uid=0)
Jul  8 06:15:04 mailserver last message repeated 8 times
Jul  8 06:17:13 mailserver su(pam_unix)[9377]: session closed for user qmailr
Jul  8 06:20:00 mailserver su(pam_unix)[9621]: session opened for user qmailr by (uid=0)
Jul  8 06:20:03 mailserver last message repeated 8 times
Jul  8 06:22:09 mailserver su(pam_unix)[9621]: session closed for user qmailr
Jul  8 06:25:00 mailserver su(pam_unix)[9852]: session opened for user qmailr by (uid=0)
Jul  8 06:25:03 mailserver last message repeated 8 times
Jul  8 06:26:43 mailserver su(pam_unix)[9852]: session closed for user qmailr
Jul  8 06:30:00 mailserver su(pam_unix)[10064]: session opened for user qmailr by (uid=0)
Jul  8 06:30:03 mailserver last message repeated 8 times
Jul  8 06:31:43 mailserver su(pam_unix)[10064]: session closed for user qmailr
Jul  8 06:35:00 mailserver su(pam_unix)[10290]: session opened for user qmailr by (uid=0)
Jul  8 06:35:03 mailserver last message repeated 8 times
Jul  8 06:37:33 mailserver su(pam_unix)[10290]: session closed for user qmailr
Jul  8 06:40:01 mailserver su(pam_unix)[10544]: session opened for user qmailr by (uid=0)
Jul  8 06:40:04 mailserver last message repeated 8 times
Jul  8 06:42:06 mailserver su(pam_unix)[10544]: session closed for user qmailr
Jul  8 06:45:00 mailserver su(pam_unix)[10778]: session opened for user qmailr by (uid=0)
Jul  8 06:45:04 mailserver last message repeated 8 times
Jul  8 06:46:36 mailserver su(pam_unix)[10778]: session closed for user qmailr
Jul  8 06:50:01 mailserver su(pam_unix)[10997]: session opened for user qmailr by (uid=0)
Jul  8 06:50:04 mailserver last message repeated 8 times
Jul  8 06:51:35 mailserver su(pam_unix)[10997]: session closed for user qmailr
Jul  8 06:55:00 mailserver su(pam_unix)[11179]: session opened for user qmailr by (uid=0)
Jul  8 06:55:04 mailserver last message repeated 8 times
Jul  8 06:57:00 mailserver su(pam_unix)[11179]: session closed for user qmailr
Jul  8 07:00:00 mailserver su(pam_unix)[11411]: session opened for user qmailr by (uid=0)
Jul  8 07:00:03 mailserver last message repeated 8 times
Jul  8 07:01:42 mailserver su(pam_unix)[11411]: session closed for user qmailr
Jul  8 07:05:00 mailserver su(pam_unix)[11630]: session opened for user qmailr by (uid=0)
Jul  8 07:05:03 mailserver last message repeated 8 times
Jul  8 07:07:14 mailserver su(pam_unix)[11630]: session closed for user qmailr
Jul  8 07:10:01 mailserver su(pam_unix)[11929]: session opened for user qmailr by (uid=0)
Jul  8 07:10:04 mailserver last message repeated 8 times
Jul  8 07:12:30 mailserver su(pam_unix)[11929]: session closed for user qmailr
Jul  8 07:15:00 mailserver su(pam_unix)[12179]: session opened for user qmailr by (uid=0)
Jul  8 07:15:03 mailserver last message repeated 8 times
Jul  8 07:18:07 mailserver su(pam_unix)[12179]: session closed for user qmailr
Jul  8 07:20:00 mailserver su(pam_unix)[12491]: session opened for user qmailr by (uid=0)
Jul  8 07:20:03 mailserver last message repeated 8 times
Jul  8 07:22:35 mailserver su(pam_unix)[12491]: session closed for user qmailr
Jul  8 07:25:00 mailserver su(pam_unix)[12753]: session opened for user qmailr by (uid=0)
Jul  8 07:25:03 mailserver last message repeated 8 times
Jul  8 07:26:33 mailserver su(pam_unix)[12753]: session closed for user qmailr
Jul  8 07:30:01 mailserver su(pam_unix)[12960]: session opened for user qmailr by (uid=0)
Jul  8 07:30:04 mailserver last message repeated 8 times
Jul  8 07:32:13 mailserver su(pam_unix)[12960]: session closed for user qmailr
Jul  8 07:35:00 mailserver su(pam_unix)[13183]: session opened for user qmailr by (uid=0)
Jul  8 07:35:03 mailserver last message repeated 8 times
Jul  8 07:36:40 mailserver su(pam_unix)[13183]: session closed for user qmailr
Jul  8 07:40:00 mailserver su(pam_unix)[13397]: session opened for user qmailr by (uid=0)
Jul  8 07:40:03 mailserver last message repeated 8 times
Jul  8 07:41:41 mailserver su(pam_unix)[13397]: session closed for user qmailr
Jul  8 07:45:00 mailserver su(pam_unix)[13616]: session opened for user qmailr by (uid=0)
Jul  8 07:45:03 mailserver last message repeated 8 times
Jul  8 07:47:01 mailserver su(pam_unix)[13616]: session closed for user qmailr
Jul  8 07:50:01 mailserver su(pam_unix)[13855]: session opened for user qmailr by (uid=0)
Jul  8 07:50:04 mailserver last message repeated 8 times
Jul  8 07:52:20 mailserver su(pam_unix)[13855]: session closed for user qmailr
Jul  8 07:55:00 mailserver su(pam_unix)[14095]: session opened for user qmailr by (uid=0)
Jul  8 07:55:03 mailserver last message repeated 8 times
Jul  8 07:57:26 mailserver su(pam_unix)[14095]: session closed for user qmailr
Jul  8 08:00:01 mailserver su(pam_unix)[14348]: session opened for user qmailr by (uid=0)
Jul  8 08:00:04 mailserver last message repeated 8 times
Jul  8 08:01:50 mailserver su(pam_unix)[14348]: session closed for user qmailr
Jul  8 08:05:00 mailserver su(pam_unix)[14571]: session opened for user qmailr by (uid=0)
Jul  8 08:05:03 mailserver last message repeated 8 times
Jul  8 08:06:51 mailserver su(pam_unix)[14571]: session closed for user qmailr
Jul  8 08:10:01 mailserver su(pam_unix)[14820]: session opened for user qmailr by (uid=0)
Jul  8 08:10:04 mailserver last message repeated 8 times
Jul  8 08:12:08 mailserver su(pam_unix)[14820]: session closed for user qmailr
Jul  8 08:15:00 mailserver su(pam_unix)[15065]: session opened for user qmailr by (uid=0)
Jul  8 08:15:03 mailserver last message repeated 8 times
Jul  8 08:17:11 mailserver su(pam_unix)[15065]: session closed for user qmailr
Jul  8 08:20:01 mailserver su(pam_unix)[15327]: session opened for user qmailr by (uid=0)
Jul  8 08:20:04 mailserver last message repeated 8 times
Jul  8 08:21:52 mailserver su(pam_unix)[15327]: session closed for user qmailr
Jul  8 08:25:00 mailserver su(pam_unix)[15535]: session opened for user qmailr by (uid=0)
Jul  8 08:25:03 mailserver last message repeated 8 times
Jul  8 08:27:47 mailserver su(pam_unix)[15535]: session closed for user qmailr
Jul  8 08:30:01 mailserver su(pam_unix)[15831]: session opened for user qmailr by (uid=0)
Jul  8 08:30:04 mailserver last message repeated 8 times
Jul  8 08:32:01 mailserver su(pam_unix)[15831]: session closed for user qmailr
Jul  8 08:35:00 mailserver su(pam_unix)[16068]: session opened for user qmailr by (uid=0)
Jul  8 08:35:03 mailserver last message repeated 8 times
Jul  8 08:36:50 mailserver su(pam_unix)[16068]: session closed for user qmailr
Jul  8 08:40:00 mailserver su(pam_unix)[16307]: session opened for user qmailr by (uid=0)
Jul  8 08:40:03 mailserver last message repeated 8 times
Jul  8 08:42:20 mailserver su(pam_unix)[16307]: session closed for user qmailr
Jul  8 08:45:00 mailserver su(pam_unix)[16558]: session opened for user qmailr by (uid=0)
Jul  8 08:45:03 mailserver last message repeated 8 times
Jul  8 08:47:26 mailserver su(pam_unix)[16558]: session closed for user qmailr
Jul  8 08:50:01 mailserver su(pam_unix)[16854]: session opened for user qmailr by (uid=0)
Jul  8 08:50:04 mailserver last message repeated 8 times
Jul  8 08:52:35 mailserver su(pam_unix)[16854]: session closed for user qmailr
Jul  8 08:55:00 mailserver su(pam_unix)[17108]: session opened for user qmailr by (uid=0)
Jul  8 08:55:03 mailserver last message repeated 8 times
Jul  8 08:57:32 mailserver su(pam_unix)[17108]: session closed for user qmailr
Jul  8 09:00:01 mailserver su(pam_unix)[17400]: session opened for user qmailr by (uid=0)
Jul  8 09:00:04 mailserver last message repeated 8 times
Jul  8 09:02:13 mailserver su(pam_unix)[17400]: session closed for user qmailr
Jul  8 09:05:00 mailserver su(pam_unix)[17637]: session opened for user qmailr by (uid=0)
Jul  8 09:05:04 mailserver last message repeated 8 times
Jul  8 09:07:42 mailserver su(pam_unix)[17637]: session closed for user qmailr
Jul  8 09:10:00 mailserver su(pam_unix)[17913]: session opened for user qmailr by (uid=0)
Jul  8 09:10:03 mailserver last message repeated 8 times
Jul  8 09:12:22 mailserver su(pam_unix)[17913]: session closed for user qmailr
Jul  8 09:15:01 mailserver su(pam_unix)[18215]: session opened for user qmailr by (uid=0)
Jul  8 09:15:04 mailserver last message repeated 8 times
Jul  8 09:17:44 mailserver su(pam_unix)[18215]: session closed for user qmailr
Jul  8 09:20:00 mailserver su(pam_unix)[18484]: session opened for user qmailr by (uid=0)
Jul  8 09:20:03 mailserver last message repeated 8 times
Jul  8 09:22:49 mailserver su(pam_unix)[18484]: session closed for user qmailr
Jul  8 09:25:01 mailserver su(pam_unix)[18805]: session opened for user qmailr by (uid=0)
Jul  8 09:25:04 mailserver last message repeated 8 times
Jul  8 09:27:00 mailserver su(pam_unix)[18805]: session closed for user qmailr
Jul  8 09:27:49 mailserver sshd[18976]: Did not receive identification string from 81.203.44.254
Jul  8 09:30:01 mailserver su(pam_unix)[19028]: session opened for user qmailr by (uid=0)
Jul  8 09:30:04 mailserver last message repeated 8 times
Jul  8 09:32:18 mailserver su(pam_unix)[19028]: session closed for user qmailr
Jul  8 09:33:10 mailserver sshd[19277]: Failed password for root from 81.203.44.254 port 2998 ssh2
Jul  8 09:33:11 mailserver sshd[19279]: Failed password for root from 81.203.44.254 port 3027 ssh2
Jul  8 09:33:12 mailserver sshd[19281]: Failed password for root from 81.203.44.254 port 3037 ssh2
Jul  8 09:33:13 mailserver sshd[19283]: Failed password for root from 81.203.44.254 port 3049 ssh2
Jul  8 09:33:14 mailserver sshd[19285]: Failed password for root from 81.203.44.254 port 3062 ssh2
Jul  8 09:33:15 mailserver sshd[19287]: Failed password for root from 81.203.44.254 port 3077 ssh2
Jul  8 09:33:16 mailserver sshd[19289]: Failed password for root from 81.203.44.254 port 3089 ssh2
Jul  8 09:33:17 mailserver sshd[19291]: Failed password for root from 81.203.44.254 port 3104 ssh2
Jul  8 09:33:18 mailserver sshd[19293]: Illegal user carol from 81.203.44.254
Jul  8 09:33:18 mailserver sshd[19293]: Failed password for illegal user carol from 81.203.44.254 port 3119 ssh2
Jul  8 09:33:19 mailserver sshd[19295]: Illegal user cesar from 81.203.44.254
Jul  8 09:33:19 mailserver sshd[19295]: Failed password for illegal user cesar from 81.203.44.254 port 3130 ssh2
Jul  8 09:33:20 mailserver sshd[19297]: Illegal user clark from 81.203.44.254
Jul  8 09:33:20 mailserver sshd[19297]: Failed password for illegal user clark from 81.203.44.254 port 3146 ssh2
Jul  8 09:33:21 mailserver sshd[19299]: Illegal user clinton from 81.203.44.254
Jul  8 09:33:21 mailserver sshd[19299]: Failed password for illegal user clinton from 81.203.44.254 port 3158 ssh2
Jul  8 09:33:22 mailserver sshd[19301]: Illegal user kayla from 81.203.44.254
Jul  8 09:33:22 mailserver sshd[19301]: Failed password for illegal user kayla from 81.203.44.254 port 3170 ssh2
Jul  8 09:33:23 mailserver sshd[19303]: Illegal user russ from 81.203.44.254
Jul  8 09:33:23 mailserver sshd[19303]: Failed password for illegal user russ from 81.203.44.254 port 3184 ssh2
Jul  8 09:33:24 mailserver sshd[19305]: Illegal user white from 81.203.44.254
Jul  8 09:33:24 mailserver sshd[19305]: Failed password for illegal user white from 81.203.44.254 port 3198 ssh2
Jul  8 09:33:25 mailserver sshd[19307]: Illegal user danny from 81.203.44.254
Jul  8 09:33:25 mailserver sshd[19307]: Failed password for illegal user danny from 81.203.44.254 port 3211 ssh2
Jul  8 09:33:25 mailserver sshd[19309]: Illegal user filip from 81.203.44.254
Jul  8 09:33:25 mailserver sshd[19309]: Failed password for illegal user filip from 81.203.44.254 port 3223 ssh2
Jul  8 09:33:26 mailserver sshd[19311]: Illegal user stephanie from 81.203.44.254
Jul  8 09:33:26 mailserver sshd[19311]: Failed password for illegal user stephanie from 81.203.44.254 port 3235 ssh2
Jul  8 09:33:27 mailserver sshd[19315]: Failed password for root from 81.203.44.254 port 3249 ssh2
Jul  8 09:33:28 mailserver sshd[19317]: Failed password for root from 81.203.44.254 port 3261 ssh2
Jul  8 09:33:29 mailserver sshd[19319]: Failed password for root from 81.203.44.254 port 3273 ssh2
Jul  8 09:33:30 mailserver sshd[19321]: Failed password for root from 81.203.44.254 port 3291 ssh2
Jul  8 09:33:31 mailserver sshd[19323]: Failed password for root from 81.203.44.254 port 3303 ssh2
Jul  8 09:33:32 mailserver sshd[19325]: Failed password for root from 81.203.44.254 port 3317 ssh2
Jul  8 09:33:33 mailserver sshd[19327]: Failed password for root from 81.203.44.254 port 3332 ssh2
Jul  8 09:33:34 mailserver sshd[19329]: Failed password for root from 81.203.44.254 port 3343 ssh2
Jul  8 09:33:35 mailserver sshd[19333]: Failed password for root from 81.203.44.254 port 3361 ssh2
Jul  8 09:33:37 mailserver sshd[19337]: Failed password for root from 81.203.44.254 port 3374 ssh2
Jul  8 09:33:38 mailserver sshd[19339]: Failed password for root from 81.203.44.254 port 3386 ssh2
Jul  8 09:33:39 mailserver sshd[19341]: Failed password for root from 81.203.44.254 port 3402 ssh2
Jul  8 09:33:40 mailserver sshd[19343]: Failed password for root from 81.203.44.254 port 3415 ssh2
Jul  8 09:33:41 mailserver sshd[19345]: Failed password for root from 81.203.44.254 port 3430 ssh2
Jul  8 09:33:42 mailserver sshd[19347]: Failed password for root from 81.203.44.254 port 3447 ssh2
Jul  8 09:33:43 mailserver sshd[19349]: Failed password for root from 81.203.44.254 port 3458 ssh2
Jul  8 09:33:44 mailserver sshd[19351]: Failed password for root from 81.203.44.254 port 3478 ssh2
Jul  8 09:33:45 mailserver sshd[19353]: Failed password for root from 81.203.44.254 port 3489 ssh2
Jul  8 09:33:47 mailserver sshd[19355]: Failed password for root from 81.203.44.254 port 3504 ssh2
Jul  8 09:33:48 mailserver sshd[19357]: Failed password for root from 81.203.44.254 port 3519 ssh2
Jul  8 09:33:49 mailserver sshd[19359]: Failed password for root from 81.203.44.254 port 3533 ssh2
Jul  8 09:33:50 mailserver sshd[19361]: Failed password for root from 81.203.44.254 port 3547 ssh2
Jul  8 09:33:51 mailserver sshd[19363]: Failed password for root from 81.203.44.254 port 3565 ssh2
Jul  8 09:33:52 mailserver sshd[19365]: Failed password for root from 81.203.44.254 port 3580 ssh2
Jul  8 09:33:53 mailserver sshd[19367]: Failed password for root from 81.203.44.254 port 3593 ssh2
Jul  8 09:33:54 mailserver sshd[19371]: Failed password for root from 81.203.44.254 port 3605 ssh2
Jul  8 09:33:55 mailserver sshd[19373]: Failed password for root from 81.203.44.254 port 3620 ssh2
Jul  8 09:33:56 mailserver sshd[19375]: Failed password for root from 81.203.44.254 port 3631 ssh2
Jul  8 09:33:57 mailserver sshd[19377]: Failed password for root from 81.203.44.254 port 3644 ssh2
Jul  8 09:33:58 mailserver sshd[19379]: Failed password for root from 81.203.44.254 port 3658 ssh2
Jul  8 09:33:59 mailserver sshd[19381]: Failed password for root from 81.203.44.254 port 3676 ssh2
Jul  8 09:34:00 mailserver sshd[19383]: Failed password for root from 81.203.44.254 port 3689 ssh2
Jul  8 09:34:05 mailserver sshd[19404]: Failed password for root from 81.203.44.254 port 3703 ssh2
Jul  8 09:34:06 mailserver sshd[19406]: Failed password for root from 81.203.44.254 port 3757 ssh2
Jul  8 09:34:07 mailserver sshd[19408]: Failed password for root from 81.203.44.254 port 3771 ssh2
Jul  8 09:34:08 mailserver sshd[19410]: Failed password for root from 81.203.44.254 port 3786 ssh2
Jul  8 09:34:09 mailserver sshd[19412]: Failed password for root from 81.203.44.254 port 3798 ssh2
Jul  8 09:34:10 mailserver sshd[19414]: Failed password for root from 81.203.44.254 port 3813 ssh2
Jul  8 09:34:11 mailserver sshd[19416]: Failed password for root from 81.203.44.254 port 3831 ssh2
Jul  8 09:34:12 mailserver sshd[19418]: Failed password for root from 81.203.44.254 port 3842 ssh2
Jul  8 09:34:13 mailserver sshd[19420]: Failed password for root from 81.203.44.254 port 3856 ssh2
Jul  8 09:34:14 mailserver sshd[19423]: Failed password for root from 81.203.44.254 port 3872 ssh2
Jul  8 09:34:15 mailserver sshd[19425]: Failed password for root from 81.203.44.254 port 3879 ssh2
Jul  8 09:34:16 mailserver sshd[19427]: Failed password for root from 81.203.44.254 port 3894 ssh2
Jul  8 09:34:17 mailserver sshd[19429]: Failed password for root from 81.203.44.254 port 3908 ssh2
Jul  8 09:34:18 mailserver sshd[19431]: Failed password for root from 81.203.44.254 port 3919 ssh2
Jul  8 09:34:19 mailserver sshd[19433]: Failed password for root from 81.203.44.254 port 3935 ssh2
Jul  8 09:34:20 mailserver sshd[19435]: Failed password for root from 81.203.44.254 port 3949 ssh2
Jul  8 09:34:21 mailserver sshd[19437]: Failed password for root from 81.203.44.254 port 3961 ssh2
Jul  8 09:34:22 mailserver sshd[19439]: Failed password for root from 81.203.44.254 port 3975 ssh2
Jul  8 09:34:23 mailserver sshd[19441]: Failed password for root from 81.203.44.254 port 3986 ssh2
Jul  8 09:34:24 mailserver sshd[19443]: Failed password for root from 81.203.44.254 port 4000 ssh2
Jul  8 09:34:25 mailserver sshd[19445]: Failed password for root from 81.203.44.254 port 4013 ssh2
Jul  8 09:34:26 mailserver sshd[19447]: Failed password for root from 81.203.44.254 port 4027 ssh2
Jul  8 09:34:27 mailserver sshd[19449]: Failed password for root from 81.203.44.254 port 4041 ssh2
Jul  8 09:34:28 mailserver sshd[19451]: Failed password for root from 81.203.44.254 port 4054 ssh2
Jul  8 09:34:29 mailserver sshd[19453]: Failed password for root from 81.203.44.254 port 4069 ssh2
Jul  8 09:34:30 mailserver sshd[19455]: Failed password for root from 81.203.44.254 port 4083 ssh2
Jul  8 09:34:31 mailserver sshd[19457]: Failed password for root from 81.203.44.254 port 4095 ssh2
Jul  8 09:34:32 mailserver sshd[19459]: Failed password for root from 81.203.44.254 port 4107 ssh2
Jul  8 09:34:33 mailserver sshd[19461]: Failed password for root from 81.203.44.254 port 4120 ssh2
Jul  8 09:34:34 mailserver sshd[19463]: Failed password for root from 81.203.44.254 port 4133 ssh2
Jul  8 09:34:35 mailserver sshd[19465]: Failed password for root from 81.203.44.254 port 4146 ssh2
Jul  8 09:34:36 mailserver sshd[19467]: Failed password for root from 81.203.44.254 port 4157 ssh2
Jul  8 09:34:37 mailserver sshd[19469]: Failed password for root from 81.203.44.254 port 4172 ssh2
Jul  8 09:34:38 mailserver sshd[19471]: Failed password for root from 81.203.44.254 port 3666 ssh2
Jul  8 09:34:39 mailserver sshd[19473]: Failed password for root from 81.203.44.254 port 3681 ssh2
Jul  8 09:34:40 mailserver sshd[19475]: Failed password for root from 81.203.44.254 port 3695 ssh2
Jul  8 09:34:41 mailserver sshd[19477]: Failed password for root from 81.203.44.254 port 3708 ssh2
Jul  8 09:34:42 mailserver sshd[19479]: Failed password for root from 81.203.44.254 port 3721 ssh2
Jul  8 09:34:43 mailserver sshd[19481]: Failed password for root from 81.203.44.254 port 3736 ssh2
Jul  8 09:34:44 mailserver sshd[19483]: Failed password for root from 81.203.44.254 port 3749 ssh2
Jul  8 09:34:45 mailserver sshd[19485]: Failed password for root from 81.203.44.254 port 3764 ssh2
Jul  8 09:34:46 mailserver sshd[19487]: Failed password for root from 81.203.44.254 port 3776 ssh2
Jul  8 09:34:47 mailserver sshd[19489]: Failed password for root from 81.203.44.254 port 3790 ssh2
Jul  8 09:34:48 mailserver sshd[19491]: Failed password for root from 81.203.44.254 port 3804 ssh2
Jul  8 09:34:49 mailserver sshd[19493]: Failed password for root from 81.203.44.254 port 3818 ssh2
Jul  8 09:34:50 mailserver sshd[19495]: Failed password for root from 81.203.44.254 port 3830 ssh2
Jul  8 09:34:51 mailserver sshd[19497]: Failed password for root from 81.203.44.254 port 3847 ssh2
Jul  8 09:34:52 mailserver sshd[19499]: Failed password for root from 81.203.44.254 port 3860 ssh2
Jul  8 09:34:53 mailserver sshd[19501]: Failed password for root from 81.203.44.254 port 3873 ssh2
Jul  8 09:34:54 mailserver sshd[19503]: Failed password for root from 81.203.44.254 port 3884 ssh2
Jul  8 09:34:55 mailserver sshd[19505]: Failed password for root from 81.203.44.254 port 3897 ssh2
Jul  8 09:34:56 mailserver sshd[19507]: Failed password for root from 81.203.44.254 port 3913 ssh2
Jul  8 09:34:57 mailserver sshd[19509]: Failed password for root from 81.203.44.254 port 3924 ssh2
Jul  8 09:34:58 mailserver sshd[19511]: Failed password for root from 81.203.44.254 port 3937 ssh2
Jul  8 09:34:59 mailserver sshd[19513]: Failed password for root from 81.203.44.254 port 3953 ssh2
Jul  8 09:35:00 mailserver sshd[19515]: Failed password for root from 81.203.44.254 port 3965 ssh2
Jul  8 09:35:00 mailserver su(pam_unix)[19523]: session opened for user qmailr by (uid=0)
Jul  8 09:35:01 mailserver sshd[19517]: Failed password for root from 81.203.44.254 port 3977 ssh2
Jul  8 09:35:02 mailserver sshd[19566]: Failed password for root from 81.203.44.254 port 3996 ssh2
Jul  8 09:35:03 mailserver sshd[19573]: Failed password for root from 81.203.44.254 port 4008 ssh2
Jul  8 09:35:04 mailserver sshd[19575]: Failed password for root from 81.203.44.254 port 4019 ssh2
Jul  8 09:35:04 mailserver last message repeated 8 times
Jul  8 09:35:05 mailserver sshd[19577]: Failed password for root from 81.203.44.254 port 4034 ssh2
Jul  8 09:35:06 mailserver sshd[19588]: Failed password for root from 81.203.44.254 port 4048 ssh2
Jul  8 09:35:07 mailserver sshd[19594]: Failed password for root from 81.203.44.254 port 4058 ssh2
Jul  8 09:35:08 mailserver sshd[19596]: Failed password for root from 81.203.44.254 port 4075 ssh2
Jul  8 09:35:09 mailserver sshd[19598]: Failed password for root from 81.203.44.254 port 4089 ssh2
Jul  8 09:35:10 mailserver sshd[19608]: Failed password for root from 81.203.44.254 port 4102 ssh2
Jul  8 09:35:11 mailserver sshd[19618]: Failed password for root from 81.203.44.254 port 4121 ssh2
Jul  8 09:35:12 mailserver sshd[19620]: Failed password for root from 81.203.44.254 port 4134 ssh2
Jul  8 09:35:13 mailserver sshd[19622]: Failed password for root from 81.203.44.254 port 4143 ssh2
Jul  8 09:35:14 mailserver sshd[19627]: Failed password for root from 81.203.44.254 port 4158 ssh2
Jul  8 09:35:15 mailserver sshd[19634]: Failed password for root from 81.203.44.254 port 4173 ssh2
Jul  8 09:35:16 mailserver sshd[19640]: Failed password for root from 81.203.44.254 port 4187 ssh2
Jul  8 09:35:17 mailserver sshd[19642]: Failed password for root from 81.203.44.254 port 4201 ssh2
Jul  8 09:35:18 mailserver sshd[19644]: Failed password for root from 81.203.44.254 port 4215 ssh2
Jul  8 09:35:19 mailserver sshd[19646]: Failed password for root from 81.203.44.254 port 4228 ssh2
Jul  8 09:35:21 mailserver sshd[19648]: Failed password for root from 81.203.44.254 port 4243 ssh2
Jul  8 09:35:22 mailserver sshd[19650]: Failed password for root from 81.203.44.254 port 4256 ssh2
Jul  8 09:35:23 mailserver sshd[19652]: Failed password for root from 81.203.44.254 port 4268 ssh2
Jul  8 09:35:24 mailserver sshd[19654]: Failed password for root from 81.203.44.254 port 4283 ssh2
Jul  8 09:35:25 mailserver sshd[19656]: Failed password for root from 81.203.44.254 port 4296 ssh2
Jul  8 09:35:26 mailserver sshd[19658]: Failed password for root from 81.203.44.254 port 4311 ssh2
Jul  8 09:35:27 mailserver sshd[19660]: Failed password for root from 81.203.44.254 port 4325 ssh2
Jul  8 09:35:28 mailserver sshd[19664]: Failed password for root from 81.203.44.254 port 4337 ssh2
Jul  8 09:35:29 mailserver sshd[19666]: Failed password for root from 81.203.44.254 port 4349 ssh2
Jul  8 09:35:30 mailserver sshd[19668]: Failed password for root from 81.203.44.254 port 4363 ssh2
Jul  8 09:35:31 mailserver sshd[19670]: Failed password for root from 81.203.44.254 port 4377 ssh2
Jul  8 09:35:32 mailserver sshd[19672]: Failed password for root from 81.203.44.254 port 4393 ssh2
Jul  8 09:35:33 mailserver sshd[19674]: Failed password for root from 81.203.44.254 port 4402 ssh2
Jul  8 09:35:33 mailserver sshd[19676]: Failed password for root from 81.203.44.254 port 4415 ssh2
Jul  8 09:35:34 mailserver sshd[19678]: Failed password for root from 81.203.44.254 port 4427 ssh2
Jul  8 09:35:38 mailserver sshd[19682]: Failed password for root from 81.203.44.254 port 4441 ssh2
Jul  8 09:35:39 mailserver sshd[19684]: Failed password for root from 81.203.44.254 port 4492 ssh2
Jul  8 09:35:40 mailserver sshd[19686]: Failed password for root from 81.203.44.254 port 4505 ssh2
Jul  8 09:35:41 mailserver sshd[19688]: Failed password for root from 81.203.44.254 port 4522 ssh2
Jul  8 09:35:42 mailserver sshd[19690]: Failed password for root from 81.203.44.254 port 4535 ssh2
Jul  8 09:35:43 mailserver sshd[19692]: Failed password for root from 81.203.44.254 port 4548 ssh2
Jul  8 09:35:44 mailserver sshd[19694]: Failed password for root from 81.203.44.254 port 4562 ssh2
Jul  8 09:35:45 mailserver sshd[19696]: Failed password for root from 81.203.44.254 port 4574 ssh2
Jul  8 09:35:46 mailserver sshd[19698]: Failed password for root from 81.203.44.254 port 4585 ssh2
Jul  8 09:35:47 mailserver sshd[19700]: Failed password for root from 81.203.44.254 port 4598 ssh2
Jul  8 09:35:48 mailserver sshd[19702]: Failed password for root from 81.203.44.254 port 4610 ssh2
Jul  8 09:35:49 mailserver sshd[19704]: Failed password for root from 81.203.44.254 port 4622 ssh2
Jul  8 09:35:50 mailserver sshd[19706]: Failed password for root from 81.203.44.254 port 4634 ssh2
Jul  8 09:35:51 mailserver sshd[19708]: Failed password for root from 81.203.44.254 port 4650 ssh2
Jul  8 09:35:52 mailserver sshd[19710]: Failed password for root from 81.203.44.254 port 4661 ssh2
Jul  8 09:35:56 mailserver sshd[19712]: Failed password for root from 81.203.44.254 port 4675 ssh2
Jul  8 09:35:57 mailserver sshd[19714]: Failed password for root from 81.203.44.254 port 4728 ssh2
Jul  8 09:35:58 mailserver sshd[19716]: Failed password for root from 81.203.44.254 port 4739 ssh2
Jul  8 09:35:59 mailserver sshd[19718]: Failed password for root from 81.203.44.254 port 4752 ssh2
Jul  8 09:36:00 mailserver sshd[19720]: Failed password for root from 81.203.44.254 port 4764 ssh2
Jul  8 09:36:01 mailserver sshd[19728]: Failed password for root from 81.203.44.254 port 4775 ssh2
Jul  8 09:36:01 mailserver sshd[19742]: Failed password for root from 81.203.44.254 port 4788 ssh2
Jul  8 09:36:02 mailserver sshd[19744]: Failed password for root from 81.203.44.254 port 4799 ssh2
Jul  8 09:36:03 mailserver sshd[19746]: Failed password for root from 81.203.44.254 port 4810 ssh2
Jul  8 09:36:04 mailserver sshd[19748]: Failed password for root from 81.203.44.254 port 4823 ssh2
Jul  8 09:36:05 mailserver sshd[19750]: Failed password for root from 81.203.44.254 port 4836 ssh2
Jul  8 09:36:06 mailserver sshd[19752]: Failed password for root from 81.203.44.254 port 4851 ssh2
Jul  8 09:36:07 mailserver sshd[19754]: Failed password for root from 81.203.44.254 port 4862 ssh2
Jul  8 09:36:08 mailserver sshd[19756]: Failed password for root from 81.203.44.254 port 4876 ssh2
Jul  8 09:36:09 mailserver sshd[19758]: Failed password for root from 81.203.44.254 port 4890 ssh2
Jul  8 09:36:10 mailserver sshd[19760]: Failed password for root from 81.203.44.254 port 4904 ssh2
Jul  8 09:36:11 mailserver sshd[19762]: Failed password for root from 81.203.44.254 port 4918 ssh2
Jul  8 09:36:12 mailserver sshd[19764]: Failed password for root from 81.203.44.254 port 4932 ssh2
Jul  8 09:36:13 mailserver sshd[19766]: Failed password for root from 81.203.44.254 port 4946 ssh2
Jul  8 09:36:14 mailserver sshd[19768]: Failed password for root from 81.203.44.254 port 4957 ssh2
Jul  8 09:36:15 mailserver sshd[19770]: Failed password for root from 81.203.44.254 port 4969 ssh2
Jul  8 09:36:16 mailserver sshd[19773]: Failed password for root from 81.203.44.254 port 4984 ssh2
Jul  8 09:36:17 mailserver sshd[19775]: Failed password for root from 81.203.44.254 port 4995 ssh2
Jul  8 09:36:18 mailserver sshd[19777]: Failed password for root from 81.203.44.254 port 1032 ssh2
Jul  8 09:36:19 mailserver sshd[19779]: Failed password for root from 81.203.44.254 port 1046 ssh2
Jul  8 09:36:20 mailserver sshd[19781]: Failed password for root from 81.203.44.254 port 1058 ssh2
Jul  8 09:36:21 mailserver sshd[19783]: Failed password for root from 81.203.44.254 port 1075 ssh2
Jul  8 09:36:22 mailserver sshd[19786]: Failed password for root from 81.203.44.254 port 1087 ssh2
Jul  8 09:36:23 mailserver sshd[19790]: Failed password for root from 81.203.44.254 port 1102 ssh2
Jul  8 09:36:24 mailserver sshd[19792]: Failed password for root from 81.203.44.254 port 1114 ssh2
Jul  8 09:36:25 mailserver sshd[19798]: Failed password for root from 81.203.44.254 port 1128 ssh2
Jul  8 09:36:26 mailserver sshd[19805]: Failed password for root from 81.203.44.254 port 1143 ssh2
Jul  8 09:36:27 mailserver sshd[19807]: Failed password for root from 81.203.44.254 port 1157 ssh2
Jul  8 09:36:28 mailserver sshd[19809]: Failed password for root from 81.203.44.254 port 1166 ssh2
Jul  8 09:36:29 mailserver sshd[19811]: Failed password for root from 81.203.44.254 port 1185 ssh2
Jul  8 09:36:30 mailserver sshd[19813]: Failed password for root from 81.203.44.254 port 1197 ssh2
Jul  8 09:36:31 mailserver sshd[19815]: Failed password for root from 81.203.44.254 port 1209 ssh2
Jul  8 09:36:32 mailserver sshd[19819]: Failed password for root from 81.203.44.254 port 1224 ssh2
Jul  8 09:36:33 mailserver sshd[19822]: Failed password for root from 81.203.44.254 port 1237 ssh2
Jul  8 09:36:34 mailserver sshd[19826]: Failed password for root from 81.203.44.254 port 1247 ssh2
Jul  8 09:36:35 mailserver sshd[19836]: Failed password for root from 81.203.44.254 port 1263 ssh2
Jul  8 09:36:36 mailserver sshd[19838]: Failed password for root from 81.203.44.254 port 1276 ssh2
Jul  8 09:36:37 mailserver sshd[19840]: Failed password for root from 81.203.44.254 port 1288 ssh2
Jul  8 09:36:38 mailserver sshd[19842]: Failed password for root from 81.203.44.254 port 1302 ssh2
Jul  8 09:36:39 mailserver sshd[19844]: Failed password for root from 81.203.44.254 port 1316 ssh2
Jul  8 09:36:40 mailserver sshd[19846]: Failed password for root from 81.203.44.254 port 1329 ssh2
Jul  8 09:36:41 mailserver sshd[19848]: Failed password for root from 81.203.44.254 port 1341 ssh2
Jul  8 09:36:42 mailserver sshd[19852]: Failed password for root from 81.203.44.254 port 1356 ssh2
Jul  8 09:36:43 mailserver sshd[19854]: Failed password for root from 81.203.44.254 port 1370 ssh2
Jul  8 09:36:44 mailserver sshd[19857]: Failed password for root from 81.203.44.254 port 1381 ssh2
Jul  8 09:36:45 mailserver sshd[19867]: Failed password for root from 81.203.44.254 port 1397 ssh2
Jul  8 09:36:46 mailserver sshd[19869]: Failed password for root from 81.203.44.254 port 1411 ssh2
Jul  8 09:36:48 mailserver sshd[19871]: Failed password for root from 81.203.44.254 port 1424 ssh2
Jul  8 09:36:48 mailserver sshd[19873]: Failed password for root from 81.203.44.254 port 1438 ssh2
Jul  8 09:36:49 mailserver sshd[19875]: Failed password for root from 81.203.44.254 port 1449 ssh2
Jul  8 09:36:51 mailserver sshd[19877]: Failed password for root from 81.203.44.254 port 1463 ssh2
Jul  8 09:36:52 mailserver sshd[19879]: Failed password for root from 81.203.44.254 port 1485 ssh2
Jul  8 09:36:53 mailserver sshd[19883]: Failed password for root from 81.203.44.254 port 1500 ssh2
Jul  8 09:36:54 mailserver sshd[19885]: Failed password for root from 81.203.44.254 port 1515 ssh2
Jul  8 09:36:55 mailserver sshd[19887]: Failed password for root from 81.203.44.254 port 1529 ssh2
Jul  8 09:36:56 mailserver sshd[19894]: Failed password for root from 81.203.44.254 port 1540 ssh2
Jul  8 09:36:57 mailserver sshd[19900]: Failed password for root from 81.203.44.254 port 1553 ssh2
Jul  8 09:36:58 mailserver sshd[19902]: Failed password for root from 81.203.44.254 port 1569 ssh2
Jul  8 09:36:59 mailserver sshd[19904]: Failed password for root from 81.203.44.254 port 1582 ssh2
Jul  8 09:37:00 mailserver sshd[19906]: Failed password for root from 81.203.44.254 port 1597 ssh2
Jul  8 09:37:01 mailserver sshd[19919]: Failed password for root from 81.203.44.254 port 1612 ssh2
Jul  8 09:37:02 mailserver sshd[19928]: Failed password for root from 81.203.44.254 port 1625 ssh2
Jul  8 09:37:04 mailserver sshd[19930]: Failed password for root from 81.203.44.254 port 1639 ssh2
Jul  8 09:37:05 mailserver sshd[19932]: Failed password for root from 81.203.44.254 port 1654 ssh2
Jul  8 09:37:05 mailserver sshd[19936]: Failed password for root from 81.203.44.254 port 1665 ssh2
Jul  8 09:37:06 mailserver sshd[19938]: Failed password for root from 81.203.44.254 port 1676 ssh2
Jul  8 09:37:07 mailserver sshd[19940]: Failed password for root from 81.203.44.254 port 1688 ssh2
Jul  8 09:37:08 mailserver su(pam_unix)[19523]: session closed for user qmailr
Jul  8 09:37:08 mailserver sshd[19943]: Failed password for root from 81.203.44.254 port 1701 ssh2
Jul  8 09:37:09 mailserver sshd[19952]: Failed password for root from 81.203.44.254 port 1716 ssh2
Jul  8 09:37:10 mailserver sshd[19954]: Failed password for root from 81.203.44.254 port 1730 ssh2
Jul  8 09:37:11 mailserver sshd[19956]: Failed password for root from 81.203.44.254 port 1744 ssh2
Jul  8 09:37:13 mailserver sshd[19958]: Failed password for root from 81.203.44.254 port 1757 ssh2
Jul  8 09:37:14 mailserver sshd[19960]: Failed password for root from 81.203.44.254 port 1772 ssh2
Jul  8 09:37:15 mailserver sshd[19962]: Failed password for root from 81.203.44.254 port 1786 ssh2
Jul  8 09:37:16 mailserver sshd[19964]: Failed password for root from 81.203.44.254 port 1797 ssh2
Jul  8 09:37:17 mailserver sshd[19966]: Failed password for root from 81.203.44.254 port 1814 ssh2
Jul  8 09:37:18 mailserver sshd[19968]: Failed password for root from 81.203.44.254 port 1828 ssh2
Jul  8 09:37:19 mailserver sshd[19970]: Failed password for root from 81.203.44.254 port 1840 ssh2
Jul  8 09:37:20 mailserver sshd[19972]: Failed password for root from 81.203.44.254 port 1853 ssh2
Jul  8 09:37:21 mailserver sshd[19974]: Failed password for root from 81.203.44.254 port 1867 ssh2
Jul  8 09:37:22 mailserver sshd[19976]: Failed password for root from 81.203.44.254 port 1882 ssh2
Jul  8 09:37:23 mailserver sshd[19978]: Failed password for root from 81.203.44.254 port 1894 ssh2
Jul  8 09:37:24 mailserver sshd[19980]: Failed password for root from 81.203.44.254 port 1906 ssh2
Jul  8 09:37:25 mailserver sshd[19982]: Failed password for root from 81.203.44.254 port 1920 ssh2
Jul  8 09:37:26 mailserver sshd[19984]: Failed password for root from 81.203.44.254 port 1932 ssh2
Jul  8 09:37:26 mailserver sshd[19986]: Failed password for root from 81.203.44.254 port 1944 ssh2
Jul  8 09:37:28 mailserver sshd[19990]: Failed password for root from 81.203.44.254 port 1957 ssh2
Jul  8 09:37:28 mailserver sshd[19992]: Failed password for root from 81.203.44.254 port 1970 ssh2
Jul  8 09:37:29 mailserver sshd[19994]: Failed password for root from 81.203.44.254 port 1985 ssh2
Jul  8 09:37:30 mailserver sshd[19996]: Failed password for root from 81.203.44.254 port 1994 ssh2
Jul  8 09:37:31 mailserver sshd[19998]: Failed password for root from 81.203.44.254 port 2009 ssh2
Jul  8 09:37:32 mailserver sshd[20000]: Failed password for root from 81.203.44.254 port 2023 ssh2
Jul  8 09:37:33 mailserver sshd[20002]: Failed password for root from 81.203.44.254 port 2035 ssh2
Jul  8 09:37:34 mailserver sshd[20004]: Failed password for root from 81.203.44.254 port 2048 ssh2
Jul  8 09:37:35 mailserver sshd[20006]: Failed password for root from 81.203.44.254 port 2061 ssh2
Jul  8 09:37:36 mailserver sshd[20010]: Failed password for root from 81.203.44.254 port 2073 ssh2
Jul  8 09:37:37 mailserver sshd[20012]: Failed password for root from 81.203.44.254 port 2090 ssh2
Jul  8 09:37:38 mailserver sshd[20014]: Failed password for root from 81.203.44.254 port 2103 ssh2
Jul  8 09:37:39 mailserver sshd[20016]: Failed password for root from 81.203.44.254 port 2116 ssh2
Jul  8 09:37:40 mailserver sshd[20018]: Failed password for root from 81.203.44.254 port 2129 ssh2
Jul  8 09:37:41 mailserver sshd[20020]: Failed password for root from 81.203.44.254 port 2141 ssh2
Jul  8 09:37:42 mailserver sshd[20022]: Failed password for root from 81.203.44.254 port 2156 ssh2
Jul  8 09:37:43 mailserver sshd[20024]: Failed password for root from 81.203.44.254 port 2168 ssh2
Jul  8 09:37:44 mailserver sshd[20026]: Failed password for root from 81.203.44.254 port 2178 ssh2
Jul  8 09:37:45 mailserver sshd[20028]: Failed password for root from 81.203.44.254 port 2192 ssh2
Jul  8 09:37:46 mailserver sshd[20030]: Failed password for root from 81.203.44.254 port 2206 ssh2
Jul  8 09:37:47 mailserver sshd[20032]: Failed password for root from 81.203.44.254 port 2218 ssh2
Jul  8 09:37:48 mailserver sshd[20034]: Failed password for root from 81.203.44.254 port 2233 ssh2
Jul  8 09:37:49 mailserver sshd[20036]: Failed password for root from 81.203.44.254 port 2248 ssh2
Jul  8 09:37:50 mailserver sshd[20038]: Failed password for root from 81.203.44.254 port 2264 ssh2
Jul  8 09:37:51 mailserver sshd[20040]: Failed password for root from 81.203.44.254 port 2276 ssh2
Jul  8 09:37:52 mailserver sshd[20042]: Failed password for root from 81.203.44.254 port 2290 ssh2
Jul  8 09:37:53 mailserver sshd[20044]: Failed password for root from 81.203.44.254 port 2301 ssh2
Jul  8 09:37:54 mailserver sshd[20046]: Failed password for root from 81.203.44.254 port 2317 ssh2
Jul  8 09:37:55 mailserver sshd[20048]: Failed password for root from 81.203.44.254 port 2330 ssh2
Jul  8 09:37:56 mailserver sshd[20050]: Failed password for root from 81.203.44.254 port 2340 ssh2
Jul  8 09:37:57 mailserver sshd[20054]: Failed password for root from 81.203.44.254 port 2354 ssh2
Jul  8 09:37:58 mailserver sshd[20056]: Failed password for root from 81.203.44.254 port 2370 ssh2
Jul  8 09:37:59 mailserver sshd[20058]: Failed password for root from 81.203.44.254 port 2381 ssh2
Jul  8 09:38:00 mailserver sshd[20060]: Failed password for root from 81.203.44.254 port 2394 ssh2
Jul  8 09:38:01 mailserver sshd[20080]: Failed password for root from 81.203.44.254 port 2406 ssh2
Jul  8 09:38:02 mailserver sshd[20082]: Failed password for root from 81.203.44.254 port 2420 ssh2
Jul  8 09:38:03 mailserver sshd[20084]: Failed password for root from 81.203.44.254 port 2432 ssh2
Jul  8 09:38:04 mailserver sshd[20086]: Failed password for root from 81.203.44.254 port 2448 ssh2
Jul  8 09:38:05 mailserver sshd[20088]: Failed password for root from 81.203.44.254 port 2459 ssh2
Jul  8 09:38:06 mailserver sshd[20090]: Failed password for root from 81.203.44.254 port 2472 ssh2
Jul  8 09:38:07 mailserver sshd[20092]: Failed password for root from 81.203.44.254 port 2487 ssh2
Jul  8 09:38:08 mailserver sshd[20094]: Failed password for root from 81.203.44.254 port 2498 ssh2
Jul  8 09:38:09 mailserver sshd[20096]: Failed password for root from 81.203.44.254 port 2510 ssh2
Jul  8 09:38:10 mailserver sshd[20098]: Failed password for root from 81.203.44.254 port 2524 ssh2
Jul  8 09:38:11 mailserver sshd[20100]: Failed password for root from 81.203.44.254 port 2535 ssh2
Jul  8 09:38:12 mailserver sshd[20102]: Failed password for root from 81.203.44.254 port 2547 ssh2
Jul  8 09:38:13 mailserver sshd[20104]: Failed password for root from 81.203.44.254 port 2562 ssh2
Jul  8 09:38:14 mailserver sshd[20106]: Failed password for root from 81.203.44.254 port 2575 ssh2
Jul  8 09:38:15 mailserver sshd[20108]: Failed password for root from 81.203.44.254 port 2586 ssh2
Jul  8 09:38:16 mailserver sshd[20110]: Failed password for root from 81.203.44.254 port 2599 ssh2
Jul  8 09:38:20 mailserver sshd[20112]: Failed password for root from 81.203.44.254 port 2614 ssh2
Jul  8 09:38:21 mailserver sshd[20114]: Failed password for root from 81.203.44.254 port 2665 ssh2
Jul  8 09:38:21 mailserver sshd[20116]: Failed password for root from 81.203.44.254 port 2678 ssh2
Jul  8 09:38:22 mailserver sshd[20118]: Failed password for root from 81.203.44.254 port 2691 ssh2
Jul  8 09:38:23 mailserver sshd[20120]: Failed password for root from 81.203.44.254 port 2702 ssh2
Jul  8 09:38:24 mailserver sshd[20122]: Failed password for root from 81.203.44.254 port 2715 ssh2
Jul  8 09:38:25 mailserver sshd[20124]: Failed password for root from 81.203.44.254 port 2726 ssh2
Jul  8 09:38:26 mailserver sshd[20126]: Failed password for root from 81.203.44.254 port 2739 ssh2
Jul  8 09:38:27 mailserver sshd[20128]: Failed password for root from 81.203.44.254 port 2751 ssh2
Jul  8 09:38:28 mailserver sshd[20130]: Failed password for root from 81.203.44.254 port 2762 ssh2
Jul  8 09:38:29 mailserver sshd[20132]: Failed password for root from 81.203.44.254 port 2776 ssh2
Jul  8 09:38:30 mailserver sshd[20134]: Failed password for root from 81.203.44.254 port 2792 ssh2
Jul  8 09:38:31 mailserver sshd[20136]: Failed password for root from 81.203.44.254 port 2803 ssh2
Jul  8 09:38:32 mailserver sshd[20138]: Failed password for root from 81.203.44.254 port 2817 ssh2
Jul  8 09:38:33 mailserver sshd[20140]: Failed password for root from 81.203.44.254 port 2831 ssh2
Jul  8 09:38:34 mailserver sshd[20142]: Failed password for root from 81.203.44.254 port 2843 ssh2
Jul  8 09:38:35 mailserver sshd[20144]: Failed password for root from 81.203.44.254 port 2857 ssh2
Jul  8 09:38:36 mailserver sshd[20148]: Failed password for root from 81.203.44.254 port 2872 ssh2
Jul  8 09:38:37 mailserver sshd[20150]: Failed password for root from 81.203.44.254 port 2884 ssh2
Jul  8 09:38:38 mailserver sshd[20152]: Failed password for root from 81.203.44.254 port 2896 ssh2
Jul  8 09:38:39 mailserver sshd[20154]: Failed password for root from 81.203.44.254 port 2906 ssh2
Jul  8 09:38:40 mailserver sshd[20156]: Failed password for root from 81.203.44.254 port 2922 ssh2
Jul  8 09:38:41 mailserver sshd[20158]: Failed password for root from 81.203.44.254 port 2934 ssh2
Jul  8 09:38:41 mailserver sshd[20160]: Failed password for root from 81.203.44.254 port 2945 ssh2
Jul  8 09:38:42 mailserver sshd[20162]: Failed password for root from 81.203.44.254 port 2958 ssh2
Jul  8 09:38:43 mailserver sshd[20164]: Failed password for root from 81.203.44.254 port 2973 ssh2
Jul  8 09:38:44 mailserver sshd[20166]: Failed password for root from 81.203.44.254 port 2985 ssh2
Jul  8 09:38:45 mailserver sshd[20168]: Failed password for root from 81.203.44.254 port 2996 ssh2
Jul  8 09:38:46 mailserver sshd[20170]: Failed password for root from 81.203.44.254 port 3009 ssh2
Jul  8 09:38:47 mailserver sshd[20172]: Failed password for root from 81.203.44.254 port 3020 ssh2
Jul  8 09:38:48 mailserver sshd[20174]: Failed password for root from 81.203.44.254 port 3036 ssh2
Jul  8 09:38:49 mailserver sshd[20176]: Failed password for root from 81.203.44.254 port 3049 ssh2
Jul  8 09:38:50 mailserver sshd[20178]: Failed password for root from 81.203.44.254 port 3062 ssh2
Jul  8 09:38:54 mailserver sshd[20180]: Failed password for root from 81.203.44.254 port 3074 ssh2
Jul  8 09:38:55 mailserver sshd[20182]: Failed password for root from 81.203.44.254 port 3125 ssh2
Jul  8 09:38:56 mailserver sshd[20184]: Failed password for root from 81.203.44.254 port 3136 ssh2
Jul  8 09:38:57 mailserver sshd[20186]: Failed password for root from 81.203.44.254 port 3151 ssh2
Jul  8 09:38:58 mailserver sshd[20188]: Failed password for root from 81.203.44.254 port 3165 ssh2
Jul  8 09:38:59 mailserver sshd[20190]: Failed password for root from 81.203.44.254 port 3175 ssh2
Jul  8 09:39:00 mailserver sshd[20192]: Failed password for root from 81.203.44.254 port 3190 ssh2
Jul  8 09:39:01 mailserver sshd[20194]: Failed password for root from 81.203.44.254 port 3204 ssh2
Jul  8 09:39:01 mailserver sshd[20212]: Failed password for root from 81.203.44.254 port 3215 ssh2
Jul  8 09:39:02 mailserver sshd[20216]: Failed password for root from 81.203.44.254 port 3225 ssh2
Jul  8 09:39:03 mailserver sshd[20218]: Failed password for root from 81.203.44.254 port 3242 ssh2
Jul  8 09:39:04 mailserver sshd[20220]: Failed password for root from 81.203.44.254 port 3253 ssh2
Jul  8 09:39:05 mailserver sshd[20222]: Failed password for root from 81.203.44.254 port 3265 ssh2
Jul  8 09:39:06 mailserver sshd[20224]: Failed password for root from 81.203.44.254 port 3277 ssh2
Jul  8 09:39:07 mailserver sshd[20226]: Failed password for root from 81.203.44.254 port 3291 ssh2
Jul  8 09:39:08 mailserver sshd[20228]: Failed password for root from 81.203.44.254 port 3300 ssh2
Jul  8 09:39:09 mailserver sshd[20230]: Failed password for root from 81.203.44.254 port 3311 ssh2
Jul  8 09:39:10 mailserver sshd[20232]: Failed password for root from 81.203.44.254 port 3325 ssh2
Jul  8 09:39:10 mailserver sshd[20234]: Failed password for root from 81.203.44.254 port 3338 ssh2
Jul  8 09:39:11 mailserver sshd[20236]: Failed password for root from 81.203.44.254 port 3350 ssh2
Jul  8 09:39:12 mailserver sshd[20238]: Failed password for root from 81.203.44.254 port 3360 ssh2
Jul  8 09:39:13 mailserver sshd[20240]: Failed password for root from 81.203.44.254 port 3373 ssh2
Jul  8 09:39:14 mailserver sshd[20242]: Failed password for root from 81.203.44.254 port 3384 ssh2
Jul  8 09:39:15 mailserver sshd[20244]: Failed password for root from 81.203.44.254 port 3393 ssh2
Jul  8 09:39:16 mailserver sshd[20246]: Failed password for root from 81.203.44.254 port 3404 ssh2
Jul  8 09:39:17 mailserver sshd[20248]: Failed password for root from 81.203.44.254 port 3414 ssh2
Jul  8 09:39:18 mailserver sshd[20250]: Failed password for root from 81.203.44.254 port 3425 ssh2
Jul  8 09:39:19 mailserver sshd[20252]: Failed password for root from 81.203.44.254 port 3436 ssh2
Jul  8 09:39:19 mailserver sshd[20254]: Failed password for root from 81.203.44.254 port 3448 ssh2
Jul  8 09:39:20 mailserver sshd[20256]: Failed password for root from 81.203.44.254 port 3460 ssh2
Jul  8 09:39:21 mailserver sshd[20258]: Failed password for root from 81.203.44.254 port 3472 ssh2
Jul  8 09:39:22 mailserver sshd[20260]: Failed password for root from 81.203.44.254 port 3484 ssh2
Jul  8 09:39:23 mailserver sshd[20262]: Failed password for root from 81.203.44.254 port 3493 ssh2
Jul  8 09:39:27 mailserver sshd[20266]: Failed password for root from 81.203.44.254 port 3504 ssh2
Jul

[Jasonuocs]

Alot of hacking by looks...

ul  8 19:46:40 mailserver sshd(pam_unix)[20045]: session closed for user paul
Jul  8 19:50:00 mailserver su(pam_unix)[20437]: session opened for user qmailr by (uid=0)
Jul  8 19:50:03 mailserver last message repeated 8 times
Jul  8 19:52:10 mailserver su(pam_unix)[20437]: session closed for user qmailr
Jul  8 19:55:00 mailserver su(pam_unix)[20685]: session opened for user qmailr by (uid=0)
Jul  8 19:55:03 mailserver last message repeated 8 times
Jul  8 19:56:51 mailserver su(pam_unix)[20685]: session closed for user qmailr
Jul  8 20:00:00 mailserver su(pam_unix)[20929]: session opened for user qmailr by (uid=0)
Jul  8 20:00:03 mailserver last message repeated 8 times
Jul  8 20:02:28 mailserver su(pam_unix)[20929]: session closed for user qmailr
Jul  8 20:05:01 mailserver su(pam_unix)[21182]: session opened for user qmailr by (uid=0)
Jul  8 20:05:04 mailserver last message repeated 8 times
Jul  8 20:08:00 mailserver su(pam_unix)[21182]: session closed for user qmailr
Jul  8 20:10:00 mailserver su(pam_unix)[21481]: session opened for user qmailr by (uid=0)
Jul  8 20:10:03 mailserver last message repeated 8 times
Jul  8 20:12:33 mailserver su(pam_unix)[21481]: session closed for user qmailr
Jul  8 20:15:01 mailserver su(pam_unix)[21783]: session opened for user qmailr by (uid=0)
Jul  8 20:15:04 mailserver last message repeated 8 times
Jul  8 20:17:21 mailserver su(pam_unix)[21783]: session closed for user qmailr
Jul  8 20:20:00 mailserver su(pam_unix)[22023]: session opened for user qmailr by (uid=0)
Jul  8 20:20:03 mailserver last message repeated 8 times
Jul  8 20:22:27 mailserver su(pam_unix)[22023]: session closed for user qmailr
Jul  8 20:25:01 mailserver su(pam_unix)[22273]: session opened for user qmailr by (uid=0)
Jul  8 20:25:04 mailserver last message repeated 8 times
Jul  8 20:27:14 mailserver su(pam_unix)[22273]: session closed for user qmailr
Jul  8 20:30:01 mailserver su(pam_unix)[22521]: session opened for user qmailr by (uid=0)
Jul  8 20:30:04 mailserver last message repeated 8 times
Jul  8 20:33:10 mailserver su(pam_unix)[22521]: session closed for user qmailr
Jul  8 20:35:00 mailserver su(pam_unix)[22826]: session opened for user qmailr by (uid=0)
Jul  8 20:35:03 mailserver last message repeated 8 times
Jul  8 20:38:01 mailserver su(pam_unix)[22826]: session closed for user qmailr
Jul  8 20:40:00 mailserver su(pam_unix)[23155]: session opened for user qmailr by (uid=0)
Jul  8 20:40:03 mailserver last message repeated 8 times
Jul  8 20:42:08 mailserver su(pam_unix)[23155]: session closed for user qmailr
Jul  8 20:45:00 mailserver su(pam_unix)[23376]: session opened for user qmailr by (uid=0)
Jul  8 20:45:04 mailserver last message repeated 8 times
Jul  8 20:47:49 mailserver su(pam_unix)[23376]: session closed for user qmailr
Jul  8 20:50:00 mailserver su(pam_unix)[23682]: session opened for user qmailr by (uid=0)
Jul  8 20:50:03 mailserver last message repeated 8 times
Jul  8 20:52:38 mailserver su(pam_unix)[23682]: session closed for user qmailr
Jul  8 20:55:00 mailserver su(pam_unix)[23971]: session opened for user qmailr by (uid=0)
Jul  8 20:55:03 mailserver last message repeated 8 times
Jul  8 20:56:35 mailserver su(pam_unix)[23971]: session closed for user qmailr
Jul  8 21:00:01 mailserver su(pam_unix)[24182]: session opened for user qmailr by (uid=0)
Jul  8 21:00:04 mailserver last message repeated 8 times
Jul  8 21:03:15 mailserver su(pam_unix)[24182]: session closed for user qmailr
Jul  8 21:05:00 mailserver su(pam_unix)[24521]: session opened for user qmailr by (uid=0)
Jul  8 21:05:03 mailserver last message repeated 8 times
Jul  8 21:07:01 mailserver su(pam_unix)[24521]: session closed for user qmailr
Jul  8 21:10:01 mailserver su(pam_unix)[24770]: session opened for user qmailr by (uid=0)
Jul  8 21:10:04 mailserver last message repeated 8 times
Jul  8 21:12:18 mailserver su(pam_unix)[24770]: session closed for user qmailr
Jul  8 21:15:00 mailserver su(pam_unix)[25038]: session opened for user qmailr by (uid=0)
Jul  8 21:15:04 mailserver last message repeated 8 times
Jul  8 21:17:26 mailserver su(pam_unix)[25038]: session closed for user qmailr
Jul  8 21:20:00 mailserver su(pam_unix)[25279]: session opened for user qmailr by (uid=0)
Jul  8 21:20:04 mailserver last message repeated 8 times
Jul  8 21:21:35 mailserver su(pam_unix)[25279]: session closed for user qmailr
Jul  8 21:25:01 mailserver su(pam_unix)[25495]: session opened for user qmailr by (uid=0)
Jul  8 21:25:04 mailserver last message repeated 8 times
Jul  8 21:26:32 mailserver su(pam_unix)[25495]: session closed for user qmailr
Jul  8 21:30:00 mailserver su(pam_unix)[25692]: session opened for user qmailr by (uid=0)
Jul  8 21:30:04 mailserver last message repeated 8 times
Jul  8 21:33:47 mailserver su(pam_unix)[25692]: session closed for user qmailr
Jul  8 21:35:00 mailserver su(pam_unix)[26047]: session opened for user qmailr by (uid=0)
Jul  8 21:35:04 mailserver last message repeated 8 times
Jul  8 21:37:41 mailserver su(pam_unix)[26047]: session closed for user qmailr
Jul  8 21:40:01 mailserver su(pam_unix)[26325]: session opened for user qmailr by (uid=0)
Jul  8 21:40:04 mailserver last message repeated 8 times
Jul  8 21:42:51 mailserver su(pam_unix)[26325]: session closed for user qmailr
Jul  8 21:45:01 mailserver su(pam_unix)[26612]: session opened for user qmailr by (uid=0)
Jul  8 21:45:04 mailserver last message repeated 8 times
Jul  8 21:47:11 mailserver su(pam_unix)[26612]: session closed for user qmailr
Jul  8 21:50:01 mailserver su(pam_unix)[26860]: session opened for user qmailr by (uid=0)
Jul  8 21:50:04 mailserver last message repeated 8 times
Jul  8 21:51:48 mailserver su(pam_unix)[26860]: session closed for user qmailr
Jul  8 21:55:00 mailserver su(pam_unix)[27057]: session opened for user qmailr by (uid=0)
Jul  8 21:55:03 mailserver last message repeated 8 times
Jul  8 21:57:25 mailserver su(pam_unix)[27057]: session closed for user qmailr
Jul  8 22:00:00 mailserver su(pam_unix)[27332]: session opened for user qmailr by (uid=0)
Jul  8 22:00:03 mailserver last message repeated 8 times
Jul  8 22:02:03 mailserver su(pam_unix)[27332]: session closed for user qmailr
Jul  8 22:05:00 mailserver su(pam_unix)[27575]: session opened for user qmailr by (uid=0)
Jul  8 22:05:03 mailserver last message repeated 8 times
Jul  8 22:06:32 mailserver su(pam_unix)[27575]: session closed for user qmailr
Jul  8 22:10:01 mailserver su(pam_unix)[27810]: session opened for user qmailr by (uid=0)
Jul  8 22:10:04 mailserver last message repeated 8 times
Jul  8 22:13:17 mailserver su(pam_unix)[27810]: session closed for user qmailr
Jul  8 22:15:00 mailserver su(pam_unix)[28116]: session opened for user qmailr by (uid=0)
Jul  8 22:15:03 mailserver last message repeated 8 times
Jul  8 22:16:56 mailserver su(pam_unix)[28116]: session closed for user qmailr
Jul  8 22:20:00 mailserver su(pam_unix)[28354]: session opened for user qmailr by (uid=0)
Jul  8 22:20:04 mailserver last message repeated 8 times
Jul  8 22:22:29 mailserver su(pam_unix)[28354]: session closed for user qmailr
Jul  8 22:25:00 mailserver su(pam_unix)[28605]: session opened for user qmailr by (uid=0)
Jul  8 22:25:03 mailserver last message repeated 8 times
Jul  8 22:27:09 mailserver su(pam_unix)[28605]: session closed for user qmailr
Jul  8 22:30:00 mailserver su(pam_unix)[28849]: session opened for user qmailr by (uid=0)
Jul  8 22:30:04 mailserver last message repeated 8 times
Jul  8 22:32:39 mailserver su(pam_unix)[28849]: session closed for user qmailr
Jul  8 22:35:00 mailserver su(pam_unix)[29122]: session opened for user qmailr by (uid=0)
Jul  8 22:35:04 mailserver last message repeated 8 times
Jul  8 22:36:32 mailserver su(pam_unix)[29122]: session closed for user qmailr
Jul  8 22:40:00 mailserver su(pam_unix)[29324]: session opened for user qmailr by (uid=0)
Jul  8 22:40:03 mailserver last message repeated 8 times
Jul  8 22:42:29 mailserver su(pam_unix)[29324]: session closed for user qmailr
Jul  8 22:45:01 mailserver su(pam_unix)[29610]: session opened for user qmailr by (uid=0)
Jul  8 22:45:04 mailserver last message repeated 8 times
Jul  8 22:46:46 mailserver su(pam_unix)[29610]: session closed for user qmailr
Jul  8 22:50:00 mailserver su(pam_unix)[29807]: session opened for user qmailr by (uid=0)
Jul  8 22:50:03 mailserver last message repeated 8 times
Jul  8 22:52:01 mailserver su(pam_unix)[29807]: session closed for user qmailr
Jul  8 22:55:00 mailserver su(pam_unix)[30049]: session opened for user qmailr by (uid=0)
Jul  8 22:55:03 mailserver last message repeated 8 times
Jul  8 22:56:22 mailserver su(pam_unix)[30049]: session closed for user qmailr
Jul  8 23:00:00 mailserver su(pam_unix)[30251]: session opened for user qmailr by (uid=0)
Jul  8 23:00:03 mailserver last message repeated 8 times
Jul  8 23:02:14 mailserver su(pam_unix)[30251]: session closed for user qmailr
Jul  8 23:05:00 mailserver su(pam_unix)[30489]: session opened for user qmailr by (uid=0)
Jul  8 23:05:04 mailserver last message repeated 8 times
Jul  8 23:07:20 mailserver su(pam_unix)[30489]: session closed for user qmailr
Jul  8 23:10:00 mailserver su(pam_unix)[30735]: session opened for user qmailr by (uid=0)
Jul  8 23:10:04 mailserver last message repeated 8 times
Jul  8 23:12:13 mailserver su(pam_unix)[30735]: session closed for user qmailr
Jul  8 23:15:00 mailserver su(pam_unix)[30989]: session opened for user qmailr by (uid=0)
Jul  8 23:15:03 mailserver last message repeated 8 times
Jul  8 23:16:31 mailserver su(pam_unix)[30989]: session closed for user qmailr
Jul  8 23:20:00 mailserver su(pam_unix)[31192]: session opened for user qmailr by (uid=0)
Jul  8 23:20:04 mailserver last message repeated 8 times
Jul  8 23:22:31 mailserver su(pam_unix)[31192]: session closed for user qmailr
Jul  8 23:25:00 mailserver su(pam_unix)[31478]: session opened for user qmailr by (uid=0)
Jul  8 23:25:03 mailserver last message repeated 8 times
Jul  8 23:28:13 mailserver su(pam_unix)[31478]: session closed for user qmailr
Jul  8 23:30:01 mailserver su(pam_unix)[31805]: session opened for user qmailr by (uid=0)
Jul  8 23:30:04 mailserver last message repeated 8 times
Jul  8 23:32:25 mailserver su(pam_unix)[31805]: session closed for user qmailr
Jul  8 23:35:00 mailserver su(pam_unix)[32058]: session opened for user qmailr by (uid=0)
Jul  8 23:35:03 mailserver last message repeated 8 times
Jul  8 23:37:11 mailserver su(pam_unix)[32058]: session closed for user qmailr
Jul  8 23:40:01 mailserver su(pam_unix)[32286]: session opened for user qmailr by (uid=0)
Jul  8 23:40:04 mailserver last message repeated 8 times
Jul  8 23:41:54 mailserver su(pam_unix)[32286]: session closed for user qmailr
Jul  8 23:45:00 mailserver su(pam_unix)[32508]: session opened for user qmailr by (uid=0)
Jul  8 23:45:03 mailserver last message repeated 8 times
Jul  8 23:46:35 mailserver su(pam_unix)[32508]: session closed for user qmailr
Jul  8 23:50:00 mailserver su(pam_unix)[32712]: session opened for user qmailr by (uid=0)
Jul  8 23:50:04 mailserver last message repeated 8 times
Jul  8 23:52:02 mailserver su(pam_unix)[32712]: session closed for user qmailr
Jul  8 23:55:00 mailserver su(pam_unix)[524]: session opened for user qmailr by (uid=0)
Jul  8 23:55:04 mailserver last message repeated 8 times
Jul  8 23:56:25 mailserver su(pam_unix)[524]: session closed for user qmailr
Jul  9 00:00:00 mailserver su(pam_unix)[707]: session opened for user qmailr by (uid=0)
Jul  9 00:00:09 mailserver last message repeated 8 times
Jul  9 00:01:34 mailserver su(pam_unix)[707]: session closed for user qmailr
Jul  9 00:05:00 mailserver su(pam_unix)[1009]: session opened for user qmailr by (uid=0)
Jul  9 00:05:03 mailserver last message repeated 8 times
Jul  9 00:06:42 mailserver su(pam_unix)[1009]: session closed for user qmailr
Jul  9 00:10:00 mailserver su(pam_unix)[1235]: session opened for user qmailr by (uid=0)
Jul  9 00:10:03 mailserver last message repeated 8 times
Jul  9 00:11:54 mailserver su(pam_unix)[1235]: session closed for user qmailr
Jul  9 00:15:01 mailserver su(pam_unix)[1490]: session opened for user qmailr by (uid=0)
Jul  9 00:15:04 mailserver last message repeated 8 times
Jul  9 00:16:51 mailserver su(pam_unix)[1490]: session closed for user qmailr
Jul  9 00:20:01 mailserver su(pam_unix)[1727]: session opened for user qmailr by (uid=0)
Jul  9 00:20:04 mailserver last message repeated 8 times
Jul  9 00:21:43 mailserver su(pam_unix)[1727]: session closed for user qmailr
Jul  9 00:25:01 mailserver su(pam_unix)[1948]: session opened for user qmailr by (uid=0)
Jul  9 00:25:04 mailserver last message repeated 8 times
Jul  9 00:27:23 mailserver su(pam_unix)[1948]: session closed for user qmailr
Jul  9 00:28:33 mailserver sshd[2171]: reverse mapping checking getaddrinfo for balki.biz failed - POSSIBLE BREAKIN ATTEMPT!
Jul  9 00:28:37 mailserver sshd[2171]: Accepted password for paul from 193.77.70.226 port 2874 ssh2
Jul  9 00:28:37 mailserver sshd(pam_unix)[2173]: session opened for user paul by (uid=0)
Jul  9 00:28:37 mailserver sshd(pam_unix)[2173]: session closed for user paul
Jul  9 00:30:01 mailserver su(pam_unix)[2212]: session opened for user qmailr by (uid=0)
Jul  9 00:30:04 mailserver last message repeated 8 times
Jul  9 00:32:00 mailserver su(pam_unix)[2212]: session closed for user qmailr
Jul  9 00:35:00 mailserver su(pam_unix)[2426]: session opened for user qmailr by (uid=0)
Jul  9 00:35:04 mailserver last message repeated 8 times
Jul  9 00:36:42 mailserver su(pam_unix)[2426]: session closed for user qmailr
Jul  9 00:40:00 mailserver su(pam_unix)[2647]: session opened for user qmailr by (uid=0)
Jul  9 00:40:04 mailserver last message repeated 8 times
Jul  9 00:42:10 mailserver su(pam_unix)[2647]: session closed for user qmailr
Jul  9 00:45:00 mailserver su(pam_unix)[2891]: session opened for user qmailr by (uid=0)
Jul  9 00:45:04 mailserver last message repeated 8 times
Jul  9 00:46:24 mailserver su(pam_unix)[2891]: session closed for user qmailr
Jul  9 00:50:00 mailserver su(pam_unix)[3081]: session opened for user qmailr by (uid=0)
Jul  9 00:50:04 mailserver last message repeated 8 times
Jul  9 00:51:51 mailserver su(pam_unix)[3081]: session closed for user qmailr
Jul  9 00:55:00 mailserver su(pam_unix)[3299]: session opened for user qmailr by (uid=0)
Jul  9 00:55:03 mailserver last message repeated 8 times
Jul  9 00:57:34 mailserver su(pam_unix)[3299]: session closed for user qmailr
Jul  9 01:00:00 mailserver su(pam_unix)[3576]: session opened for user qmailr by (uid=0)
Jul  9 01:00:04 mailserver last message repeated 8 times
Jul  9 01:01:42 mailserver su(pam_unix)[3576]: session closed for user qmailr
Jul  9 01:05:01 mailserver su(pam_unix)[3805]: session opened for user qmailr by (uid=0)
Jul  9 01:05:04 mailserver last message repeated 8 times
Jul  9 01:07:44 mailserver su(pam_unix)[3805]: session closed for user qmailr
Jul  9 01:10:00 mailserver su(pam_unix)[4068]: session opened for user qmailr by (uid=0)
Jul  9 01:10:03 mailserver last message repeated 8 times
Jul  9 01:12:01 mailserver su(pam_unix)[4068]: session closed for user qmailr
Jul  9 01:15:00 mailserver su(pam_unix)[4332]: session opened for user qmailr by (uid=0)
Jul  9 01:15:03 mailserver last message repeated 8 times
Jul  9 01:16:22 mailserver su(pam_unix)[4332]: session closed for user qmailr
Jul  9 01:20:01 mailserver su(pam_unix)[4525]: session opened for user qmailr by (uid=0)
Jul  9 01:20:04 mailserver last message repeated 8 times
Jul  9 01:21:33 mailserver su(pam_unix)[4525]: session closed for user qmailr
Jul  9 01:25:00 mailserver su(pam_unix)[4700]: session opened for user qmailr by (uid=0)
Jul  9 01:25:03 mailserver last message repeated 8 times
Jul  9 01:27:42 mailserver su(pam_unix)[4700]: session closed for user qmailr
Jul  9 01:30:00 mailserver su(pam_unix)[4970]: session opened for user qmailr by (uid=0)
Jul  9 01:30:03 mailserver last message repeated 8 times
Jul  9 01:31:46 mailserver su(pam_unix)[4970]: session closed for user qmailr
Jul  9 01:35:00 mailserver su(pam_unix)[5180]: session opened for user qmailr by (uid=0)
Jul  9 01:35:03 mailserver last message repeated 8 times
Jul  9 01:36:52 mailserver su(pam_unix)[5180]: session closed for user qmailr
Jul  9 01:40:00 mailserver su(pam_unix)[5390]: session opened for user qmailr by (uid=0)
Jul  9 01:40:03 mailserver last message repeated 8 times
Jul  9 01:41:40 mailserver su(pam_unix)[5390]: session closed for user qmailr
Jul  9 01:45:01 mailserver su(pam_unix)[5621]: session opened for user qmailr by (uid=0)
Jul  9 01:45:04 mailserver last message repeated 8 times
Jul  9 01:46:54 mailserver su(pam_unix)[5621]: session closed for user qmailr
Jul  9 01:50:01 mailserver su(pam_unix)[5842]: session opened for user qmailr by (uid=0)
Jul  9 01:50:04 mailserver last message repeated 8 times
Jul  9 01:51:53 mailserver su(pam_unix)[5842]: session closed for user qmailr
Jul  9 01:55:01 mailserver su(pam_unix)[6061]: session opened for user qmailr by (uid=0)
Jul  9 01:55:04 mailserver last message repeated 8 times
Jul  9 01:56:34 mailserver su(pam_unix)[6061]: session closed for user qmailr
Jul  9 02:00:01 mailserver su(pam_unix)[6254]: session opened for user qmailr by (uid=0)
Jul  9 02:00:04 mailserver last message repeated 8 times
Jul  9 02:00:05 mailserver su(pam_unix)[6254]: session closed for user qmailr
Jul  9 02:05:01 mailserver su(pam_unix)[6431]: session opened for user qmailr by (uid=0)
Jul  9 02:05:05 mailserver last message repeated 8 times
Jul  9 02:06:23 mailserver su(pam_unix)[6431]: session closed for user qmailr
Jul  9 02:10:00 mailserver su(pam_unix)[6636]: session opened for user qmailr by (uid=0)
Jul  9 02:10:03 mailserver last message repeated 8 times
Jul  9 02:11:50 mailserver su(pam_unix)[6636]: session closed for user qmailr
Jul  9 02:15:00 mailserver su(pam_unix)[6870]: session opened for user qmailr by (uid=0)
Jul  9 02:15:03 mailserver last message repeated 8 times
Jul  9 02:16:41 mailserver su(pam_unix)[6870]: session closed for user qmailr
Jul  9 02:20:00 mailserver su(pam_unix)[7072]: session opened for user qmailr by (uid=0)
Jul  9 02:20:04 mailserver last message repeated 8 times
Jul  9 02:22:28 mailserver su(pam_unix)[7072]: session closed for user qmailr
Jul  9 02:25:01 mailserver su(pam_unix)[7343]: session opened for user qmailr by (uid=0)
Jul  9 02:25:04 mailserver last message repeated 8 times
Jul  9 02:26:53 mailserver su(pam_unix)[7343]: session closed for user qmailr
Jul  9 02:30:00 mailserver su(pam_unix)[7576]: session opened for user qmailr by (uid=0)
Jul  9 02:30:03 mailserver last message repeated 8 times
Jul  9 02:31:44 mailserver su(pam_unix)[7576]: session closed for user qmailr
Jul  9 02:35:00 mailserver su(pam_unix)[7785]: session opened for user qmailr by (uid=0)
Jul  9 02:35:03 mailserver last message repeated 8 times
Jul  9 02:36:48 mailserver su(pam_unix)[7785]: session closed for user qmailr
Jul  9 02:40:00 mailserver su(pam_unix)[7977]: session opened for user qmailr by (uid=0)
Jul  9 02:40:03 mailserver last message repeated 8 times
Jul  9 02:41:24 mailserver su(pam_unix)[7977]: session closed for user qmailr
Jul  9 02:45:00 mailserver su(pam_unix)[8165]: session opened for user qmailr by (uid=0)
Jul  9 02:45:04 mailserver last message repeated 8 times
Jul  9 02:46:42 mailserver su(pam_unix)[8165]: session closed for user qmailr
Jul  9 02:50:00 mailserver su(pam_unix)[8382]: session opened for user qmailr by (uid=0)
Jul  9 02:50:04 mailserver last message repeated 8 times
Jul  9 02:51:34 mailserver su(pam_unix)[8382]: session closed for user qmailr
Jul  9 02:55:00 mailserver su(pam_unix)[8596]: session opened for user qmailr by (uid=0)
Jul  9 02:55:04 mailserver last message repeated 8 times
Jul  9 02:56:49 mailserver su(pam_unix)[8596]: session closed for user qmailr
Jul  9 03:00:00 mailserver su(pam_unix)[8763]: session opened for user qmailr by (uid=0)
Jul  9 03:00:04 mailserver last message repeated 8 times
Jul  9 03:01:53 mailserver su(pam_unix)[8763]: session closed for user qmailr
Jul  9 03:05:00 mailserver su(pam_unix)[8986]: session opened for user qmailr by (uid=0)
Jul  9 03:05:03 mailserver last message repeated 8 times
Jul  9 03:06:33 mailserver su(pam_unix)[8986]: session closed for user qmailr
Jul  9 03:10:00 mailserver su(pam_unix)[9207]: session opened for user qmailr by (uid=0)
Jul  9 03:10:03 mailserver last message repeated 8 times
Jul  9 03:11:55 mailserver su(pam_unix)[9207]: session closed for user qmailr
Jul  9 03:15:00 mailserver su(pam_unix)[9442]: session opened for user qmailr by (uid=0)
Jul  9 03:15:03 mailserver last message repeated 8 times
Jul  9 03:16:50 mailserver su(pam_unix)[9442]: session closed for user qmailr
Jul  9 03:20:01 mailserver su(pam_unix)[9683]: session opened for user qmailr by (uid=0)
Jul  9 03:20:04 mailserver last message repeated 8 times
Jul  9 03:21:41 mailserver su(pam_unix)[9683]: session closed for user qmailr
Jul  9 03:25:00 mailserver su(pam_unix)[9875]: session opened for user qmailr by (uid=0)
Jul  9 03:25:03 mailserver last message repeated 8 times
Jul  9 03:26:24 mailserver su(pam_unix)[9875]: session closed for user qmailr
Jul  9 03:30:00 mailserver su(pam_unix)[10067]: session opened for user qmailr by (uid=0)
Jul  9 03:30:03 mailserver last message repeated 8 times
Jul  9 03:32:10 mailserver su(pam_unix)[10067]: session closed for user qmailr
Jul  9 03:35:01 mailserver su(pam_unix)[10294]: session opened for user qmailr by (uid=0)
Jul  9 03:35:04 mailserver last message repeated 8 times
Jul  9 03:36:32 mailserver su(pam_unix)[10294]: session closed for user qmailr
Jul  9 03:40:01 mailserver su(pam_unix)[10507]: session opened for user qmailr by (uid=0)
Jul  9 03:40:04 mailserver last message repeated 8 times
Jul  9 03:42:19 mailserver su(pam_unix)[10507]: session closed for user qmailr
Jul  9 03:45:00 mailserver su(pam_unix)[10737]: session opened for user qmailr by (uid=0)
Jul  9 03:45:03 mailserver last message repeated 8 times
Jul  9 03:47:46 mailserver su(pam_unix)[10737]: session closed for user qmailr
Jul  9 03:50:00 mailserver su(pam_unix)[11017]: session opened for user qmailr by (uid=0)
Jul  9 03:50:03 mailserver last message repeated 8 times
Jul  9 03:51:35 mailserver su(pam_unix)[11017]: session closed for user qmailr
Jul  9 03:55:00 mailserver su(pam_unix)[11234]: session opened for user qmailr by (uid=0)
Jul  9 03:55:03 mailserver last message repeated 8 times
Jul  9 03:56:43 mailserver su(pam_unix)[11234]: session closed for user qmailr
Jul  9 04:00:01 mailserver su(pam_unix)[11442]: session opened for user qmailr by (uid=0)
Jul  9 04:00:04 mailserver last message repeated 8 times
Jul  9 04:01:55 mailserver su(pam_unix)[11442]: session closed for user qmailr
Jul  9 04:05:00 mailserver su(pam_unix)[11806]: session opened for user qmailr by (uid=0)
Jul  9 04:05:04 mailserver last message repeated 8 times
Jul  9 04:07:39 mailserver su(pam_unix)[11806]: session closed for user qmailr
Jul  9 04:10:00 mailserver su(pam_unix)[12080]: session opened for user qmailr by (uid=0)
Jul  9 04:10:04 mailserver last message repeated 8 times
Jul  9 04:11:27 mailserver su(pam_unix)[12080]: session closed for user qmailr
Jul  9 04:15:00 mailserver su(pam_unix)[12286]: session opened for user qmailr by (uid=0)
Jul  9 04:15:03 mailserver last message repeated 8 times
Jul  9 04:17:21 mailserver su(pam_unix)[12286]: session closed for user qmailr
Jul  9 04:20:01 mailserver su(pam_unix)[12522]: session opened for user qmailr by (uid=0)
Jul  9 04:20:04 mailserver last message repeated 8 times
Jul  9 04:22:34 mailserver su(pam_unix)[12522]: session closed for user qmailr
Jul  9 04:25:00 mailserver su(pam_unix)[12771]: session opened for user qmailr by (uid=0)
Jul  9 04:25:03 mailserver last message repeated 8 times
Jul  9 04:26:44 mailserver su(pam_unix)[12771]: session closed for user qmailr
Jul  9 04:30:00 mailserver su(pam_unix)[12976]: session opened for user qmailr by (uid=0)
Jul  9 04:30:03 mailserver last message repeated 8 times
Jul  9 04:33:12 mailserver su(pam_unix)[12976]: session closed for user qmailr
Jul  9 04:35:00 mailserver su(pam_unix)[13272]: session opened for user qmailr by (uid=0)
Jul  9 04:35:04 mailserver last message repeated 8 times
Jul  9 04:36:57 mailserver su(pam_unix)[13272]: session closed for user qmailr
Jul  9 04:40:00 mailserver su(pam_unix)[13472]: session opened for user qmailr by (uid=0)
Jul  9 04:40:03 mailserver last message repeated 8 times
Jul  9 04:41:41 mailserver su(pam_unix)[13472]: session closed for user qmailr
Jul  9 04:45:00 mailserver su(pam_unix)[13733]: session opened for user qmailr by (uid=0)
Jul  9 04:45:03 mailserver last message repeated 8 times
Jul  9 04:46:23 mailserver su(pam_unix)[13733]: session closed for user qmailr
Jul  9 04:50:01 mailserver su(pam_unix)[13919]: session opened for user qmailr by (uid=0)
Jul  9 04:50:04 mailserver last message repeated 8 times
Jul  9 04:51:22 mailserver su(pam_unix)[13919]: session closed for user qmailr
Jul  9 04:55:01 mailserver su(pam_unix)[14088]: session opened for user qmailr by (uid=0)
Jul  9 04:55:04 mailserver last message repeated 8 times
Jul  9 04:55:05 mailserver su(pam_unix)[14088]: session closed for user qmailr
Jul  9 05:00:00 mailserver su(pam_unix)[14267]: session opened for user qmailr by (uid=0)
Jul  9 05:00:03 mailserver last message repeated 8 times
Jul  9 05:02:49 mailserver su(pam_unix)[14267]: session closed for user qmailr
Jul  9 05:05:01 mailserver su(pam_unix)[14563]: session opened for user qmailr by (uid=0)
Jul  9 05:05:04 mailserver last message repeated 8 times
Jul  9 05:06:32 mailserver su(pam_unix)[14563]: session closed for user qmailr
Jul  9 05:10:00 mailserver su(pam_unix)[14770]: session opened for user qmailr by (uid=0)
Jul  9 05:10:04 mailserver last message repeated 8 times
Jul  9 05:11:50 mailserver su(pam_unix)[14770]: session closed for user qmailr
Jul  9 05:15:00 mailserver su(pam_unix)[14998]: session opened for user qmailr by (uid=0)
Jul  9 05:15:04 mailserver last message repeated 8 times
Jul  9 05:17:01 mailserver su(pam_unix)[14998]: session closed for user qmailr
Jul  9 05:20:00 mailserver su(pam_unix)[15238]: session opened for user qmailr by (uid=0)
Jul  9 05:20:03 mailserver last message repeated 8 times
Jul  9 05:21:35 mailserver su(pam_unix)[15238]: session closed for user qmailr
Jul  9 05:25:00 mailserver su(pam_unix)[15428]: session opened for user qmailr by (uid=0)
Jul  9 05:25:03 mailserver last message repeated 8 times
Jul  9 05:26:22 mailserver su(pam_unix)[15428]: session closed for user qmailr
Jul  9 05:30:01 mailserver su(pam_unix)[15614]: session opened for user qmailr by (uid=0)
Jul  9 05:30:04 mailserver last message repeated 8 times
Jul  9 05:31:42 mailserver su(pam_unix)[15614]: session closed for user qmailr
Jul  9 05:35:01 mailserver su(pam_unix)[15830]: session opened for user qmailr by (uid=0)
Jul  9 05:35:04 mailserver last message repeated 8 times
Jul  9 05:36:43 mailserver su(pam_unix)[15830]: session closed for user qmailr
Jul  9 05:40:01 mailserver su(pam_unix)[16035]: session opened for user qmailr by (uid=0)
Jul  9 05:40:04 mailserver last message repeated 8 times
Jul  9 05:42:44 mailserver su(pam_unix)[16035]: session closed for user qmailr
Jul  9 05:45:00 mailserver su(pam_unix)[16285]: session opened for user qmailr by (uid=0)
Jul  9 05:45:03 mailserver last message repeated 8 times
Jul  9 05:49:37 mailserver su(pam_unix)[16285]: session closed for user qmailr
Jul  9 05:50:00 mailserver su(pam_unix)[16687]: session opened for user qmailr by (uid=0)
Jul  9 05:50:04 mailserver last message repeated 8 times
Jul  9 05:52:29 mailserver su(pam_unix)[16687]: session closed for user qmailr
Jul  9 05:55:00 mailserver su(pam_unix)[16946]: session opened for user qmailr by (uid=0)
Jul  9 05:55:03 mailserver last message repeated 8 times
Jul  9 05:56:23 mailserver su(pam_unix)[16946]: session closed for user qmailr
Jul  9 06:00:00 mailserver su(pam_unix)[17149]: session opened for user qmailr by (uid=0)
Jul  9 06:00:03 mailserver last message repeated 8 times
Jul  9 06:02:00 mailserver su(pam_unix)[17149]: session closed for user qmailr
Jul  9 06:05:01 mailserver su(pam_unix)[17380]: session opened for user qmailr by (uid=0)
Jul  9 06:05:04 mailserver last message repeated 8 times
Jul  9 06:06:41 mailserver su(pam_unix)[17380]: session closed for user qmailr
Jul  9 06:10:00 mailserver su(pam_unix)[17584]: session opened for user qmailr by (uid=0)
Jul  9 06:10:04 mailserver last message repeated 8 times
Jul  9 06:11:32 mailserver su(pam_unix)[17584]: session closed for user qmailr
Jul  9 06:15:00 mailserver su(pam_unix)[17810]: session opened for user qmailr by (uid=0)
Jul  9 06:15:04 mailserver last message repeated 8 times
Jul  9 06:16:25 mailserver su(pam_unix)[17810]: session closed for user qmailr
Jul  9 06:20:00 mailserver su(pam_unix)[17998]: session opened for user qmailr by (uid=0)
Jul  9 06:20:03 mailserver last message repeated 8 times
Jul  9 06:22:11 mailserver su(pam_unix)[17998]: session closed for user qmailr
Jul  9 06:25:00 mailserver su(pam_unix)[18220]: session opened for user qmailr by (uid=0)
Jul  9 06:25:03 mailserver last message repeated 8 times
Jul  9 06:27:24 mailserver su(pam_unix)[18220]: session closed for user qmailr
Jul  9 06:30:00 mailserver su(pam_unix)[18461]: session opened for user qmailr by (uid=0)
Jul  9 06:30:04 mailserver last message repeated 8 times
Jul  9 06:31:33 mailserver su(pam_unix)[18461]: session closed for user qmailr
Jul  9 06:35:01 mailserver su(pam_unix)[18676]: session opened for user qmailr by (uid=0)
Jul  9 06:35:04 mailserver last message repeated 8 times
Jul  9 06:36:31 mailserver su(pam_unix)[18676]: session closed for user qmailr
Jul  9 06:40:00 mailserver su(pam_unix)[18858]: session opened for user qmailr by (uid=0)
Jul  9 06:40:03 mailserver last message repeated 8 times
Jul  9 06:41:58 mailserver su(pam_unix)[18858]: session closed for user qmailr
Jul  9 06:42:02 mailserver sshd[19015]: Failed password for root from 217.160.132.99 port 49779 ssh2
Jul  9 06:42:02 mailserver sshd[19030]: Failed password for admin from 217.160.132.99 port 49964 ssh2
Jul  9 06:42:03 mailserver sshd[19034]: Illegal user test from 217.160.132.99
Jul  9 06:42:03 mailserver sshd[19034]: Failed password for illegal user test from 217.160.132.99 port 50047 ssh2
Jul  9 06:42:04 mailserver sshd[19036]: Illegal user guest from 217.160.132.99
Jul  9 06:42:04 mailserver sshd[19036]: Failed password for illegal user guest from 217.160.132.99 port 50147 ssh2
Jul  9 06:42:04 mailserver sshd[19038]: Illegal user webmaster from 217.160.132.99
Jul  9 06:42:04 mailserver sshd[19038]: Failed password for illegal user webmaster from 217.160.132.99 port 50223 ssh2
Jul  9 06:42:06 mailserver sshd[19040]: Failed password for mysql from 217.160.132.99 port 50305 ssh2
Jul  9 06:42:07 mailserver sshd[19042]: Illegal user oracle from 217.160.132.99

[Jasonuocs]

and more...

Jul  9 07:05:04 mailserver su(pam_unix)[20353]: session closed for user qmailr
Jul  9 07:07:06 mailserver /sbin/e-smith/db[20514]: /home/e-smith/altiplano: OLD e-smith-USA-0.4.1-1=(undefined)
Jul  9 07:07:06 mailserver /sbin/e-smith/db[20514]: /home/e-smith/altiplano: NEW e-smith-USA-0.4.1-1=rpm
Jul  9 07:07:06 mailserver /sbin/e-smith/db[20514]: /home/e-smith/altiplano: OLD e-smith-USA-0.4.1-1=rpm
Jul  9 07:07:06 mailserver /sbin/e-smith/db[20514]: /home/e-smith/altiplano: NEW e-smith-USA-0.4.1-1=rpm|found|1120892825
Jul  9 07:07:08 mailserver spamassassin: spamd shutdown succeeded
Jul  9 07:07:11 mailserver /sbin/e-smith/db[20544]: /home/e-smith/altiplano: OLD USA=application|update|install
Jul  9 07:07:11 mailserver /sbin/e-smith/db[20544]: /home/e-smith/altiplano: NEW USA=application|logging|normal|update|install
Jul  9 07:07:12 mailserver crond: crond shutdown succeeded
Jul  9 07:07:12 mailserver crond: crond startup succeeded
Jul  9 07:07:24 mailserver spamassassin: spamd startup succeeded
Jul  9 07:10:00 mailserver su(pam_unix)[20652]: session opened for user qmailr by (uid=0)
Jul  9 07:10:03 mailserver last message repeated 8 times
Jul  9 07:11:24 mailserver su(pam_unix)[20652]: session closed for user qmailr
Jul  9 07:15:00 mailserver su(pam_unix)[20846]: session opened for user qmailr by (uid=0)
Jul  9 07:15:03 mailserver last message repeated 8 times
Jul  9 07:15:04 mailserver su(pam_unix)[20846]: session closed for user qmailr
Jul  9 07:20:00 mailserver su(pam_unix)[21020]: session opened for user qmailr by (uid=0)
Jul  9 07:20:03 mailserver last message repeated 8 times
Jul  9 07:21:45 mailserver su(pam_unix)[21020]: session closed for user qmailr
Jul  9 07:25:00 mailserver su(pam_unix)[21248]: session opened for user qmailr by (uid=0)
Jul  9 07:25:03 mailserver last message repeated 8 times
Jul  9 07:26:49 mailserver su(pam_unix)[21248]: session closed for user qmailr
Jul  9 07:30:00 mailserver su(pam_unix)[21437]: session opened for user qmailr by (uid=0)
Jul  9 07:30:05 mailserver last message repeated 8 times
Jul  9 07:31:35 mailserver su(pam_unix)[21437]: session closed for user qmailr
Jul  9 07:35:00 mailserver su(pam_unix)[21646]: session opened for user qmailr by (uid=0)
Jul  9 07:35:03 mailserver last message repeated 8 times
Jul  9 07:39:06 mailserver su(pam_unix)[21646]: session closed for user qmailr
Jul  9 07:40:01 mailserver su(pam_unix)[22029]: session opened for user qmailr by (uid=0)
Jul  9 07:40:04 mailserver last message repeated 8 times
Jul  9 07:41:39 mailserver su(pam_unix)[22029]: session closed for user qmailr
Jul  9 07:45:00 mailserver su(pam_unix)[22227]: session opened for user qmailr by (uid=0)
Jul  9 07:45:04 mailserver last message repeated 8 times
Jul  9 07:46:32 mailserver su(pam_unix)[22227]: session closed for user qmailr
Jul  9 07:50:00 mailserver su(pam_unix)[22418]: session opened for user qmailr by (uid=0)
Jul  9 07:50:04 mailserver last message repeated 8 times
Jul  9 07:51:23 mailserver su(pam_unix)[22418]: session closed for user qmailr
Jul  9 07:55:00 mailserver su(pam_unix)[22619]: session opened for user qmailr by (uid=0)
Jul  9 07:55:04 mailserver last message repeated 8 times
Jul  9 07:56:23 mailserver su(pam_unix)[22619]: session closed for user qmailr
Jul  9 08:00:00 mailserver su(pam_unix)[22813]: session opened for user qmailr by (uid=0)
Jul  9 08:00:03 mailserver last message repeated 8 times
Jul  9 08:01:22 mailserver su(pam_unix)[22813]: session closed for user qmailr
Jul  9 08:05:00 mailserver su(pam_unix)[23001]: session opened for user qmailr by (uid=0)
Jul  9 08:05:03 mailserver last message repeated 8 times
Jul  9 08:06:34 mailserver su(pam_unix)[23001]: session closed for user qmailr
Jul  9 08:10:01 mailserver su(pam_unix)[23195]: session opened for user qmailr by (uid=0)
Jul  9 08:10:04 mailserver last message repeated 8 times
Jul  9 08:11:53 mailserver su(pam_unix)[23195]: session closed for user qmailr
Jul  9 08:15:00 mailserver su(pam_unix)[23420]: session opened for user qmailr by (uid=0)
Jul  9 08:15:03 mailserver last message repeated 8 times
Jul  9 08:16:43 mailserver su(pam_unix)[23420]: session closed for user qmailr
Jul  9 08:20:01 mailserver su(pam_unix)[23646]: session opened for user qmailr by (uid=0)
Jul  9 08:20:04 mailserver last message repeated 8 times
Jul  9 08:21:31 mailserver su(pam_unix)[23646]: session closed for user qmailr
Jul  9 08:25:00 mailserver su(pam_unix)[23840]: session opened for user qmailr by (uid=0)
Jul  9 08:25:03 mailserver last message repeated 8 times
Jul  9 08:26:43 mailserver su(pam_unix)[23840]: session closed for user qmailr
Jul  9 08:30:00 mailserver su(pam_unix)[24037]: session opened for user qmailr by (uid=0)
Jul  9 08:30:03 mailserver last message repeated 8 times
Jul  9 08:32:18 mailserver su(pam_unix)[24037]: session closed for user qmailr
Jul  9 08:35:00 mailserver su(pam_unix)[24282]: session opened for user qmailr by (uid=0)
Jul  9 08:35:03 mailserver last message repeated 8 times
Jul  9 08:36:26 mailserver su(pam_unix)[24282]: session closed for user qmailr
Jul  9 08:40:00 mailserver su(pam_unix)[24454]: session opened for user qmailr by (uid=0)
Jul  9 08:40:03 mailserver last message repeated 8 times
Jul  9 08:41:27 mailserver su(pam_unix)[24454]: session closed for user qmailr
Jul  9 08:45:00 mailserver su(pam_unix)[24650]: session opened for user qmailr by (uid=0)
Jul  9 08:45:03 mailserver last message repeated 8 times
Jul  9 08:45:04 mailserver su(pam_unix)[24650]: session closed for user qmailr
Jul  9 08:50:00 mailserver su(pam_unix)[24831]: session opened for user qmailr by (uid=0)
Jul  9 08:50:03 mailserver last message repeated 8 times
Jul  9 08:51:23 mailserver su(pam_unix)[24831]: session closed for user qmailr
Jul  9 08:55:00 mailserver su(pam_unix)[25035]: session opened for user qmailr by (uid=0)
Jul  9 08:55:03 mailserver last message repeated 8 times
Jul  9 08:56:53 mailserver su(pam_unix)[25035]: session closed for user qmailr
Jul  9 09:00:00 mailserver su(pam_unix)[25247]: session opened for user qmailr by (uid=0)
Jul  9 09:00:03 mailserver last message repeated 8 times
Jul  9 09:01:23 mailserver su(pam_unix)[25247]: session closed for user qmailr
Jul  9 09:05:00 mailserver su(pam_unix)[25447]: session opened for user qmailr by (uid=0)
Jul  9 09:05:04 mailserver last message repeated 8 times
Jul  9 09:06:33 mailserver su(pam_unix)[25447]: session closed for user qmailr
Jul  9 09:10:00 mailserver su(pam_unix)[25633]: session opened for user qmailr by (uid=0)
Jul  9 09:10:04 mailserver last message repeated 8 times
Jul  9 09:11:25 mailserver su(pam_unix)[25633]: session closed for user qmailr
Jul  9 09:15:00 mailserver su(pam_unix)[25844]: session opened for user qmailr by (uid=0)
Jul  9 09:15:04 mailserver last message repeated 8 times
Jul  9 09:16:35 mailserver su(pam_unix)[25844]: session closed for user qmailr
Jul  9 09:20:00 mailserver su(pam_unix)[26052]: session opened for user qmailr by (uid=0)
Jul  9 09:20:03 mailserver last message repeated 8 times
Jul  9 09:20:04 mailserver su(pam_unix)[26052]: session closed for user qmailr
Jul  9 09:25:00 mailserver su(pam_unix)[26216]: session opened for user qmailr by (uid=0)
Jul  9 09:25:03 mailserver last message repeated 8 times
Jul  9 09:26:41 mailserver su(pam_unix)[26216]: session closed for user qmailr
Jul  9 09:30:00 mailserver su(pam_unix)[26445]: session opened for user qmailr by (uid=0)
Jul  9 09:30:03 mailserver last message repeated 8 times
Jul  9 09:31:55 mailserver su(pam_unix)[26445]: session closed for user qmailr
Jul  9 09:35:00 mailserver su(pam_unix)[26645]: session opened for user qmailr by (uid=0)
Jul  9 09:35:03 mailserver last message repeated 8 times
Jul  9 09:36:33 mailserver su(pam_unix)[26645]: session closed for user qmailr
Jul  9 09:40:01 mailserver su(pam_unix)[26861]: session opened for user qmailr by (uid=0)
Jul  9 09:40:04 mailserver last message repeated 8 times
Jul  9 09:42:01 mailserver su(pam_unix)[26861]: session closed for user qmailr
Jul  9 09:45:00 mailserver su(pam_unix)[27066]: session opened for user qmailr by (uid=0)
Jul  9 09:45:04 mailserver last message repeated 8 times
Jul  9 09:48:03 mailserver su(pam_unix)[27066]: session closed for user qmailr
Jul  9 09:50:00 mailserver su(pam_unix)[27377]: session opened for user qmailr by (uid=0)
Jul  9 09:50:03 mailserver last message repeated 8 times
Jul  9 09:51:57 mailserver su(pam_unix)[27377]: session closed for user qmailr
Jul  9 09:53:15 mailserver sshd[27619]: Did not receive identification string from 218.62.46.62
Jul  9 09:55:00 mailserver su(pam_unix)[27660]: session opened for user qmailr by (uid=0)
Jul  9 09:55:03 mailserver last message repeated 8 times
Jul  9 09:56:32 mailserver su(pam_unix)[27660]: session closed for user qmailr
Jul  9 09:58:41 mailserver sshd[27814]: Illegal user temp from 218.62.46.62
Jul  9 09:58:51 mailserver sshd[27814]: Failed password for illegal user temp from 218.62.46.62 port 2873 ssh2
Jul  9 10:00:00 mailserver su(pam_unix)[27846]: session opened for user qmailr by (uid=0)
Jul  9 10:00:04 mailserver last message repeated 8 times
Jul  9 10:00:05 mailserver su(pam_unix)[27846]: session closed for user qmailr
Jul  9 10:05:01 mailserver su(pam_unix)[28049]: session opened for user qmailr by (uid=0)
Jul  9 10:05:04 mailserver last message repeated 8 times
Jul  9 10:06:51 mailserver su(pam_unix)[28049]: session closed for user qmailr
Jul  9 10:10:01 mailserver su(pam_unix)[28274]: session opened for user qmailr by (uid=0)
Jul  9 10:10:04 mailserver last message repeated 8 times
Jul  9 10:11:24 mailserver su(pam_unix)[28274]: session closed for user qmailr
Jul  9 10:15:00 mailserver su(pam_unix)[28461]: session opened for user qmailr by (uid=0)
Jul  9 10:15:03 mailserver last message repeated 8 times
Jul  9 10:17:22 mailserver su(pam_unix)[28461]: session closed for user qmailr
Jul  9 10:20:00 mailserver su(pam_unix)[28719]: session opened for user qmailr by (uid=0)
Jul  9 10:20:03 mailserver last message repeated 8 times
Jul  9 10:21:43 mailserver su(pam_unix)[28719]: session closed for user qmailr
Jul  9 10:25:00 mailserver su(pam_unix)[28938]: session opened for user qmailr by (uid=0)
Jul  9 10:25:03 mailserver last message repeated 8 times
Jul  9 10:26:33 mailserver su(pam_unix)[28938]: session closed for user qmailr
Jul  9 10:30:01 mailserver su(pam_unix)[29132]: session opened for user qmailr by (uid=0)
Jul  9 10:30:04 mailserver last message repeated 8 times
Jul  9 10:31:54 mailserver su(pam_unix)[29132]: session closed for user qmailr
Jul  9 10:35:00 mailserver su(pam_unix)[29344]: session opened for user qmailr by (uid=0)
Jul  9 10:35:03 mailserver last message repeated 8 times
Jul  9 10:36:42 mailserver su(pam_unix)[29344]: session closed for user qmailr
Jul  9 10:40:00 mailserver su(pam_unix)[29556]: session opened for user qmailr by (uid=0)
Jul  9 10:40:03 mailserver last message repeated 8 times
Jul  9 10:41:41 mailserver su(pam_unix)[29556]: session closed for user qmailr
Jul  9 10:45:01 mailserver su(pam_unix)[29763]: session opened for user qmailr by (uid=0)
Jul  9 10:45:04 mailserver last message repeated 8 times
Jul  9 10:46:23 mailserver su(pam_unix)[29763]: session closed for user qmailr
Jul  9 10:50:01 mailserver su(pam_unix)[29967]: session opened for user qmailr by (uid=0)
Jul  9 10:50:04 mailserver last message repeated 8 times
Jul  9 10:51:32 mailserver su(pam_unix)[29967]: session closed for user qmailr
Jul  9 10:55:01 mailserver su(pam_unix)[30176]: session opened for user qmailr by (uid=0)
Jul  9 10:55:04 mailserver last message repeated 8 times
Jul  9 10:56:43 mailserver su(pam_unix)[30176]: session closed for user qmailr
Jul  9 11:00:01 mailserver su(pam_unix)[30389]: session opened for user qmailr by (uid=0)
Jul  9 11:00:04 mailserver last message repeated 8 times
Jul  9 11:01:35 mailserver su(pam_unix)[30389]: session closed for user qmailr
Jul  9 11:05:00 mailserver su(pam_unix)[30578]: session opened for user qmailr by (uid=0)
Jul  9 11:05:04 mailserver last message repeated 8 times
Jul  9 11:06:35 mailserver su(pam_unix)[30578]: session closed for user qmailr
Jul  9 11:10:00 mailserver su(pam_unix)[30796]: session opened for user qmailr by (uid=0)
Jul  9 11:10:04 mailserver last message repeated 8 times
Jul  9 11:12:00 mailserver su(pam_unix)[30796]: session closed for user qmailr
Jul  9 11:15:00 mailserver su(pam_unix)[31026]: session opened for user qmailr by (uid=0)
Jul  9 11:15:03 mailserver last message repeated 8 times
Jul  9 11:17:07 mailserver su(pam_unix)[31026]: session closed for user qmailr
Jul  9 11:20:00 mailserver su(pam_unix)[31275]: session opened for user qmailr by (uid=0)
Jul  9 11:20:03 mailserver last message repeated 8 times
Jul  9 11:21:43 mailserver su(pam_unix)[31275]: session closed for user qmailr
Jul  9 11:25:01 mailserver su(pam_unix)[31490]: session opened for user qmailr by (uid=0)
Jul  9 11:25:04 mailserver last message repeated 8 times
Jul  9 11:26:33 mailserver su(pam_unix)[31490]: session closed for user qmailr
Jul  9 11:30:00 mailserver su(pam_unix)[31692]: session opened for user qmailr by (uid=0)
Jul  9 11:30:04 mailserver last message repeated 8 times
Jul  9 11:31:23 mailserver su(pam_unix)[31692]: session closed for user qmailr
Jul  9 11:35:00 mailserver su(pam_unix)[31883]: session opened for user qmailr by (uid=0)
Jul  9 11:35:03 mailserver last message repeated 8 times
Jul  9 11:35:05 mailserver su(pam_unix)[31883]: session closed for user qmailr
Jul  9 11:40:00 mailserver su(pam_unix)[32084]: session opened for user qmailr by (uid=0)
Jul  9 11:40:04 mailserver last message repeated 8 times
Jul  9 11:42:01 mailserver su(pam_unix)[32084]: session closed for user qmailr
Jul  9 11:45:00 mailserver su(pam_unix)[32291]: session opened for user qmailr by (uid=0)
Jul  9 11:45:04 mailserver last message repeated 8 times
Jul  9 11:45:18 mailserver sshd[32379]: Did not receive identification string from 81.137.212.56
Jul  9 11:46:24 mailserver su(pam_unix)[32291]: session closed for user qmailr
Jul  9 11:50:01 mailserver su(pam_unix)[32504]: session opened for user qmailr by (uid=0)
Jul  9 11:50:04 mailserver last message repeated 8 times

[Jasonuocs]

I think this may be the one that helps...

Jul 10 03:07:40 mailserver su(pam_unix)[6258]: session closed for user qmailr
Jul 10 03:08:06 mailserver /sbin/e-smith/db[6443]: /home/e-smith/swerts-knudsen: OLD clamav-es-0.86.1-es01=rpm|found|1120352434
Jul 10 03:08:06 mailserver /sbin/e-smith/db[6443]: /home/e-smith/swerts-knudsen: NEW clamav-es-0.86.1-es01=rpm
Jul 10 03:08:06 mailserver /sbin/e-smith/db[6443]: /home/e-smith/swerts-knudsen: OLD clamav-es-0.86.1-es01=rpm
Jul 10 03:08:06 mailserver /sbin/e-smith/db[6443]: /home/e-smith/swerts-knudsen: NEW clamav-es-0.86.1-es01=rpm|found|1120964885
Jul 10 03:09:46 mailserver clamd: clamd shutdown succeeded
Jul 10 03:10:00 mailserver su(pam_unix)[6487]: session opened for user qmailr by (uid=0)
Jul 10 03:10:07 mailserver last message repeated 8 times
Jul 10 03:10:20 mailserver clamd: clamd startup succeeded
Jul 10 03:11:25 mailserver su(pam_unix)[6487]: session closed for user qmailr
Jul 10 03:15:01 mailserver su(pam_unix)[6621]: session opened for user qmailr by (uid=0)
Jul 10 03:15:05 mailserver last message repeated 8 times
Jul 10 03:17:53 mailserver su(pam_unix)[6621]: session closed for user qmailr
Jul 10 03:20:00 mailserver su(pam_unix)[6816]: session opened for user qmailr by (uid=0)
Jul 10 03:20:03 mailserver last message repeated 8 times
Jul 10 03:21:32 mailserver su(pam_unix)[6816]: session closed for user qmailr
Jul 10 03:25:01 mailserver su(pam_unix)[6925]: session opened for user qmailr by (uid=0)
Jul 10 03:25:05 mailserver last message repeated 8 times
Jul 10 03:27:02 mailserver su(pam_unix)[6925]: session closed for user qmailr
Jul 10 03:30:00 mailserver su(pam_unix)[7065]: session opened for user qmailr by (uid=0)
Jul 10 03:30:03 mailserver last message repeated 8 times
Jul 10 03:31:25 mailserver su(pam_unix)[7065]: session closed for user qmailr
Jul 10 03:35:00 mailserver su(pam_unix)[7158]: session opened for user qmailr by (uid=0)
Jul 10 03:35:03 mailserver last message repeated 8 times
Jul 10 03:36:33 mailserver su(pam_unix)[7158]: session closed for user qmailr
Jul 10 03:40:00 mailserver su(pam_unix)[7269]: session opened for user qmailr by (uid=0)
Jul 10 03:40:03 mailserver last message repeated 8 times
Jul 10 03:42:13 mailserver su(pam_unix)[7269]: session closed for user qmailr
Jul 10 03:45:00 mailserver su(pam_unix)[7411]: session opened for user qmailr by (uid=0)
Jul 10 03:45:04 mailserver last message repeated 8 times
Jul 10 03:47:12 mailserver su(pam_unix)[7411]: session closed for user qmailr
Jul 10 03:50:00 mailserver su(pam_unix)[7562]: session opened for user qmailr by (uid=0)
Jul 10 03:50:03 mailserver last message repeated 8 times
Jul 10 03:51:45 mailserver su(pam_unix)[7562]: session closed for user qmailr
Jul 10 03:55:01 mailserver su(pam_unix)[7682]: session opened for user qmailr by (uid=0)
Jul 10 03:55:04 mailserver last message repeated 8 times
Jul 10 03:57:12 mailserver su(pam_unix)[7682]: session closed for user qmailr
Jul 10 04:00:00 mailserver su(pam_unix)[7822]: session opened for user qmailr by (uid=0)
Jul 10 04:00:03 mailserver last message repeated 8 times
Jul 10 04:01:42 mailserver su(pam_unix)[7822]: session closed for user qmailr
Jul 10 04:05:00 mailserver su(pam_unix)[8126]: session opened for user qmailr by (uid=0)
Jul 10 04:05:03 mailserver last message repeated 8 times
Jul 10 04:07:14 mailserver su(pam_unix)[8126]: session closed for user qmailr
Jul 10 04:10:00 mailserver su(pam_unix)[8278]: session opened for user qmailr by (uid=0)
Jul 10 04:10:03 mailserver last message repeated 8 times
Jul 10 04:11:53 mailserver su(pam_unix)[8278]: session closed for user qmailr
Jul 10 04:15:01 mailserver su(pam_unix)[8419]: session opened for user qmailr by (uid=0)
Jul 10 04:15:04 mailserver last message repeated 8 times
Jul 10 04:17:13 mailserver su(pam_unix)[8419]: session closed for user qmailr
Jul 10 04:20:00 mailserver su(pam_unix)[8571]: session opened for user qmailr by (uid=0)
Jul 10 04:20:03 mailserver last message repeated 8 times
Jul 10 04:22:24 mailserver su(pam_unix)[8571]: session closed for user qmailr
Jul 10 04:23:38 mailserver e-smith[11258]: Processing event: user-logrotate
Jul 10 04:23:38 mailserver e-smith[11258]: Running event handler: /etc/e-smith/events/user-logrotate/S65procmail-logrotate
Jul 10 04:23:41 mailserver e-smith[11258]: S65procmail-logrotate=action|Event|user-logrotate|Action|S65procmail-logrotate|Start|1120969418 375536|End|1120969421 96056|Elapsed|2.72052
Jul 10 04:25:00 mailserver su(pam_unix)[11292]: session opened for user qmailr by (uid=0)
Jul 10 04:25:03 mailserver last message repeated 8 times
Jul 10 04:26:57 mailserver su(pam_unix)[11292]: session closed for user qmailr
Jul 10 04:30:00 mailserver su(pam_unix)[11425]: session opened for user qmailr by (uid=0)
Jul 10 04:30:03 mailserver last message repeated 8 times
Jul 10 04:32:27 mailserver su(pam_unix)[11425]: session closed for user qmailr
Jul 10 04:35:01 mailserver su(pam_unix)[11587]: session opened for user qmailr by (uid=0)
Jul 10 04:35:04 mailserver last message repeated 8 times
Jul 10 04:36:51 mailserver su(pam_unix)[11587]: session closed for user qmailr
Jul 10 04:40:01 mailserver su(pam_unix)[11716]: session opened for user qmailr by (uid=0)
Jul 10 04:40:05 mailserver last message repeated 8 times
Jul 10 04:41:48 mailserver su(pam_unix)[11716]: session closed for user qmailr
Jul 10 04:45:00 mailserver su(pam_unix)[11829]: session opened for user qmailr by (uid=0)
Jul 10 04:45:03 mailserver last message repeated 8 times
Jul 10 04:46:54 mailserver su(pam_unix)[11829]: session closed for user qmailr
Jul 10 04:50:00 mailserver su(pam_unix)[11958]: session opened for user qmailr by (uid=0)
Jul 10 04:50:03 mailserver last message repeated 8 times
Jul 10 04:51:25 mailserver su(pam_unix)[11958]: session closed for user qmailr
Jul 10 04:55:00 mailserver su(pam_unix)[12050]: session opened for user qmailr by (uid=0)
Jul 10 04:55:03 mailserver last message repeated 8 times
Jul 10 04:57:54 mailserver su(pam_unix)[12050]: session closed for user qmailr
Jul 10 05:00:00 mailserver su(pam_unix)[12252]: session opened for user qmailr by (uid=0)
Jul 10 05:00:03 mailserver last message repeated 8 times
Jul 10 05:01:43 mailserver su(pam_unix)[12252]: session closed for user qmailr
Jul 10 05:05:00 mailserver su(pam_unix)[12374]: session opened for user qmailr by (uid=0)
Jul 10 05:05:03 mailserver last message repeated 8 times
Jul 10 05:06:26 mailserver su(pam_unix)[12374]: session closed for user qmailr
Jul 10 05:10:00 mailserver su(pam_unix)[12469]: session opened for user qmailr by (uid=0)
Jul 10 05:10:03 mailserver last message repeated 8 times
Jul 10 05:10:04 mailserver su(pam_unix)[12469]: session closed for user qmailr
Jul 10 05:15:00 mailserver su(pam_unix)[12607]: session opened for user qmailr by (uid=0)
Jul 10 05:15:03 mailserver last message repeated 8 times
Jul 10 05:16:33 mailserver su(pam_unix)[12607]: session closed for user qmailr
Jul 10 05:20:01 mailserver su(pam_unix)[12713]: session opened for user qmailr by (uid=0)
Jul 10 05:20:05 mailserver last message repeated 8 times
Jul 10 05:21:34 mailserver su(pam_unix)[12713]: session closed for user qmailr
Jul 10 05:25:01 mailserver su(pam_unix)[12815]: session opened for user qmailr by (uid=0)
Jul 10 05:25:04 mailserver last message repeated 8 times
Jul 10 05:27:15 mailserver su(pam_unix)[12815]: session closed for user qmailr
Jul 10 05:30:00 mailserver su(pam_unix)[12971]: session opened for user qmailr by (uid=0)
Jul 10 05:30:03 mailserver last message repeated 8 times
Jul 10 05:31:54 mailserver su(pam_unix)[12971]: session closed for user qmailr
Jul 10 05:35:00 mailserver su(pam_unix)[13088]: session opened for user qmailr by (uid=0)
Jul 10 05:35:03 mailserver last message repeated 8 times
Jul 10 05:36:52 mailserver su(pam_unix)[13088]: session closed for user qmailr
Jul 10 05:40:00 mailserver su(pam_unix)[13219]: session opened for user qmailr by (uid=0)
Jul 10 05:40:04 mailserver last message repeated 8 times
Jul 10 05:42:38 mailserver su(pam_unix)[13219]: session closed for user qmailr
Jul 10 05:45:00 mailserver su(pam_unix)[13405]: session opened for user qmailr by (uid=0)
Jul 10 05:45:03 mailserver last message repeated 8 times
Jul 10 05:46:49 mailserver su(pam_unix)[13405]: session closed for user qmailr
Jul 10 05:50:00 mailserver su(pam_unix)[13527]: session opened for user qmailr by (uid=0)
Jul 10 05:50:04 mailserver last message repeated 8 times
Jul 10 05:51:42 mailserver su(pam_unix)[13527]: session closed for user qmailr
Jul 10 05:55:00 mailserver su(pam_unix)[13641]: session opened for user qmailr by (uid=0)
Jul 10 05:55:03 mailserver last message repeated 8 times
Jul 10 05:57:39 mailserver su(pam_unix)[13641]: session closed for user qmailr
Jul 10 06:00:01 mailserver su(pam_unix)[13823]: session opened for user qmailr by (uid=0)
Jul 10 06:00:04 mailserver last message repeated 8 times
Jul 10 06:00:05 mailserver su(pam_unix)[13823]: session closed for user qmailr
Jul 10 06:05:00 mailserver su(pam_unix)[13916]: session opened for user qmailr by (uid=0)
Jul 10 06:05:03 mailserver last message repeated 8 times
Jul 10 06:06:44 mailserver su(pam_unix)[13916]: session closed for user qmailr
Jul 10 06:10:00 mailserver su(pam_unix)[14035]: session opened for user qmailr by (uid=0)
Jul 10 06:10:03 mailserver last message repeated 8 times
Jul 10 06:11:54 mailserver su(pam_unix)[14035]: session closed for user qmailr
Jul 10 06:15:01 mailserver su(pam_unix)[14174]: session opened for user qmailr by (uid=0)
Jul 10 06:15:04 mailserver last message repeated 8 times
Jul 10 06:16:34 mailserver su(pam_unix)[14174]: session closed for user qmailr
Jul 10 06:20:00 mailserver su(pam_unix)[14287]: session opened for user qmailr by (uid=0)
Jul 10 06:20:04 mailserver last message repeated 8 times
Jul 10 06:22:19 mailserver su(pam_unix)[14287]: session closed for user qmailr
Jul 10 06:25:00 mailserver su(pam_unix)[14435]: session opened for user qmailr by (uid=0)
Jul 10 06:25:03 mailserver last message repeated 8 times
Jul 10 06:26:21 mailserver su(pam_unix)[14435]: session closed for user qmailr
Jul 10 06:30:01 mailserver su(pam_unix)[14531]: session opened for user qmailr by (uid=0)
Jul 10 06:30:04 mailserver last message repeated 8 times
Jul 10 06:31:52 mailserver su(pam_unix)[14531]: session closed for user qmailr
Jul 10 06:35:00 mailserver su(pam_unix)[14661]: session opened for user qmailr by (uid=0)
Jul 10 06:35:04 mailserver last message repeated 8 times
Jul 10 06:35:04 mailserver su(pam_unix)[14661]: session closed for user qmailr
Jul 10 06:40:00 mailserver su(pam_unix)[14746]: session opened for user qmailr by (uid=0)
Jul 10 06:40:03 mailserver last message repeated 8 times
Jul 10 06:41:31 mailserver su(pam_unix)[14746]: session closed for user qmailr
Jul 10 06:45:00 mailserver su(pam_unix)[14853]: session opened for user qmailr by (uid=0)
Jul 10 06:45:03 mailserver last message repeated 8 times
Jul 10 06:47:13 mailserver su(pam_unix)[14853]: session closed for user qmailr
Jul 10 06:50:00 mailserver su(pam_unix)[15000]: session opened for user qmailr by (uid=0)
Jul 10 06:50:04 mailserver last message repeated 8 times
Jul 10 06:51:51 mailserver su(pam_unix)[15000]: session closed for user qmailr
Jul 10 06:55:00 mailserver su(pam_unix)[15116]: session opened for user qmailr by (uid=0)
Jul 10 06:55:03 mailserver last message repeated 8 times
Jul 10 06:57:38 mailserver su(pam_unix)[15116]: session closed for user qmailr
Jul 10 07:00:00 mailserver su(pam_unix)[15300]: session opened for user qmailr by (uid=0)
Jul 10 07:00:03 mailserver last message repeated 8 times
Jul 10 07:01:51 mailserver su(pam_unix)[15300]: session closed for user qmailr
Jul 10 07:05:00 mailserver su(pam_unix)[15434]: session opened for user qmailr by (uid=0)
Jul 10 07:05:03 mailserver last message repeated 8 times
Jul 10 07:06:41 mailserver su(pam_unix)[15434]: session closed for user qmailr
Jul 10 07:10:00 mailserver su(pam_unix)[15553]: session opened for user qmailr by (uid=0)
Jul 10 07:10:03 mailserver last message repeated 8 times
Jul 10 07:12:06 mailserver su(pam_unix)[15553]: session closed for user qmailr
Jul 10 07:15:00 mailserver su(pam_unix)[15705]: session opened for user qmailr by (uid=0)
Jul 10 07:15:03 mailserver last message repeated 8 times
Jul 10 07:16:43 mailserver su(pam_unix)[15705]: session closed for user qmailr
Jul 10 07:20:00 mailserver su(pam_unix)[15823]: session opened for user qmailr by (uid=0)
Jul 10 07:20:03 mailserver last message repeated 8 times
Jul 10 07:20:04 mailserver su(pam_unix)[15823]: session closed for user qmailr
Jul 10 07:25:01 mailserver su(pam_unix)[15911]: session opened for user qmailr by (uid=0)
Jul 10 07:25:04 mailserver last message repeated 8 times
Jul 10 07:26:43 mailserver su(pam_unix)[15911]: session closed for user qmailr
Jul 10 07:30:00 mailserver su(pam_unix)[16026]: session opened for user qmailr by (uid=0)
Jul 10 07:30:03 mailserver last message repeated 8 times
Jul 10 07:31:22 mailserver su(pam_unix)[16026]: session closed for user qmailr
Jul 10 07:35:00 mailserver su(pam_unix)[16119]: session opened for user qmailr by (uid=0)
Jul 10 07:35:03 mailserver last message repeated 8 times
Jul 10 07:36:44 mailserver su(pam_unix)[16119]: session closed for user qmailr
Jul 10 07:40:00 mailserver su(pam_unix)[16242]: session opened for user qmailr by (uid=0)
Jul 10 07:40:03 mailserver last message repeated 8 times
Jul 10 07:41:33 mailserver su(pam_unix)[16242]: session closed for user qmailr
Jul 10 07:45:00 mailserver su(pam_unix)[16351]: session opened for user qmailr by (uid=0)
Jul 10 07:45:03 mailserver last message repeated 8 times
Jul 10 07:46:21 mailserver su(pam_unix)[16351]: session closed for user qmailr
Jul 10 07:50:01 mailserver su(pam_unix)[16452]: session opened for user qmailr by (uid=0)
Jul 10 07:50:04 mailserver last message repeated 8 times
Jul 10 07:53:55 mailserver su(pam_unix)[16452]: session closed for user qmailr
Jul 10 07:55:00 mailserver su(pam_unix)[16713]: session opened for user qmailr by (uid=0)
Jul 10 07:55:03 mailserver last message repeated 8 times
Jul 10 07:57:10 mailserver su(pam_unix)[16713]: session closed for user qmailr
Jul 10 08:00:01 mailserver su(pam_unix)[16864]: session opened for user qmailr by (uid=0)
Jul 10 08:00:04 mailserver last message repeated 8 times
Jul 10 08:01:41 mailserver su(pam_unix)[16864]: session closed for user qmailr
Jul 10 08:05:00 mailserver su(pam_unix)[16987]: session opened for user qmailr by (uid=0)
Jul 10 08:05:03 mailserver last message repeated 8 times
Jul 10 08:06:43 mailserver su(pam_unix)[16987]: session closed for user qmailr
Jul 10 08:10:00 mailserver su(pam_unix)[17111]: session opened for user qmailr by (uid=0)
Jul 10 08:10:03 mailserver last message repeated 8 times
Jul 10 08:11:23 mailserver su(pam_unix)[17111]: session closed for user qmailr
Jul 10 08:15:01 mailserver su(pam_unix)[17223]: session opened for user qmailr by (uid=0)
Jul 10 08:15:04 mailserver last message repeated 8 times
Jul 10 08:16:54 mailserver su(pam_unix)[17223]: session closed for user qmailr
Jul 10 08:20:00 mailserver su(pam_unix)[17352]: session opened for user qmailr by (uid=0)
Jul 10 08:20:03 mailserver last message repeated 8 times
Jul 10 08:21:21 mailserver su(pam_unix)[17352]: session closed for user qmailr
Jul 10 08:25:01 mailserver su(pam_unix)[17448]: session opened for user qmailr by (uid=0)
Jul 10 08:25:04 mailserver last message repeated 8 times
Jul 10 08:26:44 mailserver su(pam_unix)[17448]: session closed for user qmailr
Jul 10 08:30:00 mailserver su(pam_unix)[17571]: session opened for user qmailr by (uid=0)
Jul 10 08:30:03 mailserver last message repeated 8 times
Jul 10 08:31:43 mailserver su(pam_unix)[17571]: session closed for user qmailr
Jul 10 08:35:00 mailserver su(pam_unix)[17685]: session opened for user qmailr by (uid=0)
Jul 10 08:35:03 mailserver last message repeated 8 times
Jul 10 08:36:50 mailserver su(pam_unix)[17685]: session closed for user qmailr
Jul 10 08:40:00 mailserver su(pam_unix)[17822]: session opened for user qmailr by (uid=0)
Jul 10 08:40:04 mailserver last message repeated 8 times
Jul 10 08:40:04 mailserver su(pam_unix)[17822]: session closed for user qmailr
Jul 10 08:45:01 mailserver su(pam_unix)[17913]: session opened for user qmailr by (uid=0)
Jul 10 08:45:04 mailserver last message repeated 8 times
Jul 10 08:45:05 mailserver su(pam_unix)[17913]: session closed for user qmailr
Jul 10 08:50:00 mailserver su(pam_unix)[18005]: session opened for user qmailr by (uid=0)
Jul 10 08:50:03 mailserver last message repeated 8 times
Jul 10 08:52:00 mailserver su(pam_unix)[18005]: session closed for user qmailr
Jul 10 08:55:00 mailserver su(pam_unix)[18134]: session opened for user qmailr by (uid=0)
Jul 10 08:55:03 mailserver last message repeated 8 times
Jul 10 08:56:32 mailserver su(pam_unix)[18134]: session closed for user qmailr
Jul 10 09:00:00 mailserver su(pam_unix)[18243]: session opened for user qmailr by (uid=0)
Jul 10 09:00:03 mailserver last message repeated 8 times
Jul 10 09:02:16 mailserver su(pam_unix)[18243]: session closed for user qmailr
Jul 10 09:05:00 mailserver su(pam_unix)[18399]: session opened for user qmailr by (uid=0)
Jul 10 09:05:03 mailserver last message repeated 8 times
Jul 10 09:07:05 mailserver su(pam_unix)[18399]: session closed for user qmailr
Jul 10 09:10:00 mailserver su(pam_unix)[18529]: session opened for user qmailr by (uid=0)
Jul 10 09:10:03 mailserver last message repeated 8 times
Jul 10 09:11:42 mailserver su(pam_unix)[18529]: session closed for user qmailr
Jul 10 09:15:00 mailserver su(pam_unix)[18661]: session opened for user qmailr by (uid=0)
Jul 10 09:15:03 mailserver last message repeated 8 times
Jul 10 09:16:22 mailserver su(pam_unix)[18661]: session closed for user qmailr
Jul 10 09:20:00 mailserver su(pam_unix)[18760]: session opened for user qmailr by (uid=0)
Jul 10 09:20:04 mailserver last message repeated 8 times
Jul 10 09:22:01 mailserver su(pam_unix)[18760]: session closed for user qmailr
Jul 10 09:25:00 mailserver su(pam_unix)[18896]: session opened for user qmailr by (uid=0)
Jul 10 09:25:03 mailserver last message repeated 8 times
Jul 10 09:26:41 mailserver su(pam_unix)[18896]: session closed for user qmailr
Jul 10 09:30:00 mailserver su(pam_unix)[19021]: session opened for user qmailr by (uid=0)
Jul 10 09:30:03 mailserver last message repeated 8 times
Jul 10 09:31:22 mailserver su(pam_unix)[19021]: session closed for user qmailr
Jul 10 09:35:00 mailserver su(pam_unix)[19118]: session opened for user qmailr by (uid=0)
Jul 10 09:35:03 mailserver last message repeated 8 times
Jul 10 09:35:04 mailserver su(pam_unix)[19118]: session closed for user qmailr
Jul 10 09:40:00 mailserver su(pam_unix)[19210]: session opened for user qmailr by (uid=0)
Jul 10 09:40:03 mailserver last message repeated 8 times
Jul 10 09:41:31 mailserver su(pam_unix)[19210]: session closed for user qmailr
Jul 10 09:45:00 mailserver su(pam_unix)[19330]: session opened for user qmailr by (uid=0)
Jul 10 09:45:03 mailserver last message repeated 8 times
Jul 10 09:46:22 mailserver su(pam_unix)[19330]: session closed for user qmailr
Jul 10 09:50:00 mailserver su(pam_unix)[19433]: session opened for user qmailr by (uid=0)
Jul 10 09:50:03 mailserver last message repeated 8 times
Jul 10 09:51:32 mailserver su(pam_unix)[19433]: session closed for user qmailr
Jul 10 09:55:00 mailserver su(pam_unix)[19551]: session opened for user qmailr by (uid=0)
Jul 10 09:55:03 mailserver last message repeated 8 times
Jul 10 09:57:01 mailserver su(pam_unix)[19551]: session closed for user qmailr
Jul 10 10:00:01 mailserver su(pam_unix)[19708]: session opened for user qmailr by (uid=0)
Jul 10 10:00:04 mailserver last message repeated 8 times
Jul 10 10:02:24 mailserver su(pam_unix)[19708]: session closed for user qmailr
Jul 10 10:05:01 mailserver su(pam_unix)[19897]: session opened for user qmailr by (uid=0)
Jul 10 10:05:04 mailserver last message repeated 8 times
Jul 10 10:06:37 mailserver su(pam_unix)[19897]: session closed for user qmailr
Jul 10 10:10:01 mailserver su(pam_unix)[20026]: session opened for user qmailr by (uid=0)
Jul 10 10:10:04 mailserver last message repeated 8 times
Jul 10 10:12:04 mailserver su(pam_unix)[20026]: session closed for user qmailr
Jul 10 10:15:00 mailserver su(pam_unix)[20194]: session opened for user qmailr by (uid=0)
Jul 10 10:15:03 mailserver last message repeated 8 times
Jul 10 10:16:50 mailserver su(pam_unix)[20194]: session closed for user qmailr
Jul 10 10:20:00 mailserver su(pam_unix)[20321]: session opened for user qmailr by (uid=0)
Jul 10 10:20:03 mailserver last message repeated 8 times
Jul 10 10:21:32 mailserver su(pam_unix)[20321]: session closed for user qmailr
Jul 10 10:25:00 mailserver su(pam_unix)[20434]: session opened for user qmailr by (uid=0)
Jul 10 10:25:03 mailserver last message repeated 8 times
Jul 10 10:27:16 mailserver su(pam_unix)[20434]: session closed for user qmailr
Jul 10 10:30:00 mailserver su(pam_unix)[20591]: session opened for user qmailr by (uid=0)
Jul 10 10:30:03 mailserver last message repeated 8 times
Jul 10 10:32:20 mailserver su(pam_unix)[20591]: session closed for user qmailr
Jul 10 10:35:00 mailserver su(pam_unix)[20761]: session opened for user qmailr by (uid=0)
Jul 10 10:35:03 mailserver last message repeated 8 times
Jul 10 10:36:23 mailserver su(pam_unix)[20761]: session closed for user qmailr
Jul 10 10:40:01 mailserver su(pam_unix)[20876]: session opened for user qmailr by (uid=0)
Jul 10 10:40:04 mailserver last message repeated 8 times
Jul 10 10:41:52 mailserver su(pam_unix)[20876]: session closed for user qmailr
Jul 10 10:45:00 mailserver su(pam_unix)[21007]: session opened for user qmailr by (uid=0)
Jul 10 10:45:03 mailserver last message repeated 8 times
Jul 10 10:46:40 mailserver su(pam_unix)[21007]: session closed for user qmailr
Jul 10 10:50:00 mailserver su(pam_unix)[21142]: session opened for user qmailr by (uid=0)
Jul 10 10:50:03 mailserver last message repeated 8 times
Jul 10 10:52:17 mailserver su(pam_unix)[21142]: session closed for user qmailr
Jul 10 10:55:00 mailserver su(pam_unix)[21301]: session opened for user qmailr by (uid=0)
Jul 10 10:55:03 mailserver last message repeated 8 times
Jul 10 10:56:45 mailserver su(pam_unix)[21301]: session closed for user qmailr
Jul 10 11:00:00 mailserver su(pam_unix)[21426]: session opened for user qmailr by (uid=0)
Jul 10 11:00:03 mailserver last message repeated 8 times
Jul 10 11:00:04 mailserver su(pam_unix)[21426]: session closed for user qmailr
Jul 10 11:05:01 mailserver su(pam_unix)[21527]: session opened for user qmailr by (uid=0)
Jul 10 11:05:04 mailserver last message repeated 8 times
Jul 10 11:06:23 mailserver su(pam_unix)[21527]: session closed for user qmailr
Jul 10 11:10:00 mailserver su(pam_unix)[21631]: session opened for user qmailr by (uid=0)
Jul 10 11:10:03 mailserver last message repeated 8 times
Jul 10 11:11:31 mailserver su(pam_unix)[21631]: session closed for user qmailr
Jul 10 11:15:01 mailserver su(pam_unix)[21755]: session opened for user qmailr by (uid=0)
Jul 10 11:15:04 mailserver last message repeated 8 times
Jul 10 11:17:41 mailserver su(pam_unix)[21755]: session closed for user qmailr
Jul 10 11:20:01 mailserver su(pam_unix)[21941]: session opened for user qmailr by (uid=0)
Jul 10 11:20:04 mailserver last message repeated 8 times
Jul 10 11:21:23 mailserver su(pam_unix)[21941]: session closed for user qmailr
Jul 10 11:25:00 mailserver su(pam_unix)[22049]: session opened for user qmailr by (uid=0)
Jul 10 11:25:03 mailserver last message repeated 8 times
Jul 10 11:26:48 mailserver su(pam_unix)[22049]: session closed for user qmailr
Jul 10 11:30:01 mailserver su(pam_unix)[22171]: session opened for user qmailr by (uid=0)
Jul 10 11:30:03 mailserver last message repeated 8 times

dont know if the Clam AV update has anything to do with it!

[Jasonuocs]

This is the start up log.... there is a failiure on:

Jul 11 14:29:21 mailserver slapd[1226]: daemon: socket() failed errno=97 (Address family not supported by protocol)
Does this mean anything or is it anyhelp?

Thanks
Jason

Jul 11 14:28:42 mailserver syslogd 1.4.1: restart.
Jul 11 14:28:42 mailserver syslog: syslogd startup succeeded
Jul 11 14:28:42 mailserver syslog:
Jul 11 14:28:42 mailserver syslog: Starting kernel logger:
Jul 11 14:28:42 mailserver syslog: klogd startup succeeded
Jul 11 14:28:42 mailserver syslog:
Jul 11 14:28:42 mailserver rc: Starting syslog:  succeeded
Jul 11 14:28:42 mailserver kernel: klogd 1.4.1, log source = /proc/kmsg started.
Jul 11 14:28:42 mailserver kernel: Inspecting /boot/System.map-2.4.20-18.7
Jul 11 14:28:44 mailserver rc: Starting nut:  succeeded
Jul 11 14:28:44 mailserver kernel: Loaded 17220 symbols from /boot/System.map-2.4.20-18.7.
Jul 11 14:28:44 mailserver kernel: Symbols match kernel version 2.4.20.
Jul 11 14:28:44 mailserver kernel: Loaded 152 symbols from 6 modules.
Jul 11 14:28:44 mailserver kernel: Linux version 2.4.20-18.7 (bhcompile@stripples.devel.redhat.com) (gcc version 2.96 20000731 (Red Hat Linux 7.3 2.96-113)) #1 Thu May 29 07:51:41 EDT 2003
Jul 11 14:28:44 mailserver kernel: BIOS-provided physical RAM map:
Jul 11 14:28:44 mailserver kernel:  BIOS-e820: 0000000000000000 - 00000000000a0000 (usable)
Jul 11 14:28:44 mailserver kernel:  BIOS-e820: 00000000000f0000 - 0000000000100000 (reserved)
Jul 11 14:28:44 mailserver kernel:  BIOS-e820: 0000000000100000 - 0000000017e00000 (usable)
Jul 11 14:28:44 mailserver kernel:  BIOS-e820: 00000000ffff0000 - 0000000100000000 (reserved)
Jul 11 14:28:44 mailserver kernel: 382MB LOWMEM available.
Jul 11 14:28:44 mailserver kernel: On node 0 totalpages: 97792
Jul 11 14:28:44 mailserver kernel: zone(0): 4096 pages.
Jul 11 14:28:44 mailserver kernel: zone(1): 93696 pages.
Jul 11 14:28:44 mailserver kernel: zone(2): 0 pages.
Jul 11 14:28:44 mailserver kernel: Kernel command line: auto BOOT_IMAGE=SMEServer-up ro root=303 BOOT_FILE=/boot/vmlinuz-2.4.20-18.7
Jul 11 14:28:44 mailserver kernel: Initializing CPU#0
Jul 11 14:28:44 mailserver kernel: Detected 501.137 MHz processor.
Jul 11 14:28:44 mailserver kernel: Console: colour VGA+ 80x25
Jul 11 14:28:44 mailserver kernel: Calibrating delay loop... 999.42 BogoMIPS
Jul 11 14:28:44 mailserver kernel: Memory: 380932k/391168k available (1185k kernel code, 7676k reserved, 979k data, 116k init, 0k highmem)
Jul 11 14:28:44 mailserver kernel: Dentry cache hash table entries: 65536 (order: 7, 524288 bytes)
Jul 11 14:28:44 mailserver kernel: Inode cache hash table entries: 32768 (order: 6, 262144 bytes)
Jul 11 14:28:44 mailserver kernel: Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Jul 11 14:28:44 mailserver kernel: Buffer-cache hash table entries: 32768 (order: 5, 131072 bytes)
Jul 11 14:28:44 mailserver kernel: Page-cache hash table entries: 131072 (order: 7, 524288 bytes)
Jul 11 14:28:44 mailserver kernel: Enabling new style K6 write allocation for 382 Mb
Jul 11 14:28:44 mailserver kernel: CPU: L1 I Cache: 32K (32 bytes/line), D cache 32K (32 bytes/line)
Jul 11 14:28:44 mailserver kernel: CPU:     After generic, caps: 008021bf 808029bf 00000000 00000002
Jul 11 14:28:44 mailserver kernel: CPU:             Common caps: 008021bf 808029bf 00000000 00000002
Jul 11 14:28:44 mailserver kernel: CPU: AMD-K6(tm) 3D processor stepping 0c
Jul 11 14:28:44 mailserver kernel: Checking 'hlt' instruction... OK.
Jul 11 14:28:44 mailserver kernel: POSIX conformance testing by UNIFIX
Jul 11 14:28:44 mailserver kernel: mtrr: v1.40 (20010327) Richard Gooch (rgooch@atnf.csiro.au)
Jul 11 14:28:44 mailserver kernel: mtrr: detected mtrr type: AMD K6
Jul 11 14:28:44 mailserver kernel: PCI: PCI BIOS revision 2.10 entry at 0xfb3e0, last bus=1
Jul 11 14:28:44 mailserver kernel: PCI: Using configuration type 1
Jul 11 14:28:44 mailserver kernel: PCI: Probing PCI hardware
Jul 11 14:28:44 mailserver kernel: PCI: Using IRQ router SIS [1039/0008] at 00:01.0
Jul 11 14:28:44 mailserver kernel: isapnp: Scanning for PnP cards...
Jul 11 14:28:44 mailserver kernel: isapnp: No Plug & Play device found
Jul 11 14:28:44 mailserver kernel: Linux NET4.0 for Linux 2.4
Jul 11 14:28:44 mailserver kernel: Based upon Swansea University Computer Society NET3.039
Jul 11 14:28:44 mailserver kernel: Initializing RT netlink socket
Jul 11 14:28:44 mailserver kernel: apm: BIOS version 1.2 Flags 0x07 (Driver version 1.16)
Jul 11 14:28:44 mailserver kernel: Starting kswapd
Jul 11 14:28:44 mailserver kernel: VFS: Disk quotas vdquot_6.5.1
Jul 11 14:28:42 mailserver syslog: Starting system logger:  
Jul 11 14:28:44 mailserver kernel: pty: 512 Unix98 ptys configured
Jul 11 14:28:44 mailserver kernel: Serial driver version 5.05c (2001-07-08) with MANY_PORTS MULTIPORT SHARE_IRQ SERIAL_PCI ISAPNP enabled
Jul 11 14:28:44 mailserver kernel: ttyS0 at 0x03f8 (irq = 4) is a 16550A
Jul 11 14:28:44 mailserver kernel: ttyS1 at 0x02f8 (irq = 3) is a 16550A
Jul 11 14:28:44 mailserver kernel: Real Time Clock Driver v1.10e
Jul 11 14:28:44 mailserver kernel: Floppy drive(s): fd0 is 1.44M
Jul 11 14:28:44 mailserver kernel: FDC 0 is a post-1991 82077
Jul 11 14:28:44 mailserver kernel: NET4: Frame Diverter 0.46
Jul 11 14:28:44 mailserver kernel: RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
Jul 11 14:28:44 mailserver kernel: Uniform Multi-Platform E-IDE driver Revision: 7.00beta3-.2.4
Jul 11 14:28:44 mailserver kernel: ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
Jul 11 14:28:44 mailserver kernel: SIS5513: IDE controller at PCI slot 00:00.1
Jul 11 14:28:44 mailserver kernel: SIS5513: chipset revision 208
Jul 11 14:28:44 mailserver kernel: SIS5513: not 100%% native mode: will probe irqs later
Jul 11 14:28:44 mailserver kernel: SiS530    ATA 66 controller
Jul 11 14:28:44 mailserver kernel:     ide0: BM-DMA at 0x4000-0x4007, BIOS settings: hda:DMA, hdb:pio
Jul 11 14:28:44 mailserver kernel:     ide1: BM-DMA at 0x4008-0x400f, BIOS settings: hdc:pio, hdd:DMA
Jul 11 14:28:44 mailserver kernel: hda: WDC WD100EB-00BHF0, ATA DISK drive
Jul 11 14:28:44 mailserver kernel: blk: queue c0367880, I/O limit 4095Mb (mask 0xffffffff)
Jul 11 14:28:44 mailserver kernel: hdd: CD-ROM 48X/AKU, ATAPI CD/DVD-ROM drive
Jul 11 14:28:44 mailserver kernel: ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
Jul 11 14:28:44 mailserver kernel: ide1 at 0x170-0x177,0x376 on irq 15
Jul 11 14:28:44 mailserver kernel: hda: attached ide-disk driver.
Jul 11 14:28:44 mailserver kernel: hda: host protected area => 1
Jul 11 14:28:44 mailserver kernel: hda: 19541088 sectors (10005 MB) w/2048KiB Cache, CHS=1216/255/63, UDMA(66)
Jul 11 14:28:44 mailserver kernel: ide-floppy driver 0.99.newide
Jul 11 14:28:44 mailserver kernel: Partition check:
Jul 11 14:28:44 mailserver kernel:  hda: hda1 hda2 hda3
Jul 11 14:28:44 mailserver kernel: ide-floppy driver 0.99.newide
Jul 11 14:28:44 mailserver kernel: md: md driver 0.90.0 MAX_MD_DEVS=256, MD_SB_DISKS=27
Jul 11 14:28:44 mailserver kernel: md: Autodetecting RAID arrays.
Jul 11 14:28:44 mailserver kernel: md: autorun ...
Jul 11 14:28:44 mailserver kernel: md: ... autorun DONE.
Jul 11 14:28:44 mailserver kernel: NET4: Linux TCP/IP 1.0 for NET4.0
Jul 11 14:28:44 mailserver kernel: IP Protocols: ICMP, UDP, TCP, IGMP
Jul 11 14:28:44 mailserver kernel: IP: routing cache hash table of 4096 buckets, 32Kbytes
Jul 11 14:28:44 mailserver kernel: TCP: Hash tables configured (established 32768 bind 65536)
Jul 11 14:28:44 mailserver kernel: Linux IP multicast router 0.06 plus PIM-SM
Jul 11 14:28:44 mailserver kernel: NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
Jul 11 14:28:44 mailserver kernel: RAMDISK: Compressed image found at block 0
Jul 11 14:28:44 mailserver kernel: Freeing initrd memory: 121k freed
Jul 11 14:28:44 mailserver kernel: VFS: Mounted root (ext2 filesystem).
Jul 11 14:28:44 mailserver kernel: Journalled Block Device driver loaded
Jul 11 14:28:44 mailserver kernel: EXT3-fs: INFO: recovery required on readonly filesystem.
Jul 11 14:28:44 mailserver kernel: EXT3-fs: write access will be enabled during recovery.
Jul 11 14:28:44 mailserver kernel: kjournald starting.  Commit interval 5 seconds
Jul 11 14:28:44 mailserver kernel: EXT3-fs: ide0(3,3): orphan cleanup on readonly fs
Jul 11 14:28:44 mailserver kernel: ext3_orphan_cleanup: deleting unreferenced inode 212610
Jul 11 14:28:44 mailserver kernel: EXT3-fs: ide0(3,3): 1 orphan inode deleted
Jul 11 14:28:44 mailserver kernel: EXT3-fs: recovery complete.
Jul 11 14:28:44 mailserver kernel: EXT3-fs: mounted filesystem with ordered data mode.
Jul 11 14:28:44 mailserver kernel: Freeing unused kernel memory: 116k freed
Jul 11 14:28:44 mailserver kernel: Adding Swap: 265064k swap-space (priority -1)
Jul 11 14:28:44 mailserver kernel: EXT3 FS 2.4-0.9.19, 19 August 2002 on ide0(3,3), internal journal
Jul 11 14:28:44 mailserver kernel: kjournald starting.  Commit interval 5 seconds
Jul 11 14:28:44 mailserver kernel: EXT3 FS 2.4-0.9.19, 19 August 2002 on ide0(3,1), internal journal
Jul 11 14:28:44 mailserver kernel: EXT3-fs: mounted filesystem with ordered data mode.
Jul 11 14:28:44 mailserver kernel: hdd: attached ide-cdrom driver.
Jul 11 14:28:44 mailserver kernel: hdd: ATAPI 48X CD-ROM drive, 128kB Cache, DMA
Jul 11 14:28:44 mailserver kernel: Uniform CD-ROM driver Revision: 3.12
Jul 11 14:28:44 mailserver kernel: SCSI subsystem driver Revision: 1.00
Jul 11 14:28:44 mailserver kernel: scsi0 : SCSI host adapter emulation for IDE ATAPI devices
Jul 11 14:28:44 mailserver kernel: hdd: DMA disabled
Jul 11 14:28:45 mailserver random: Initializing random number generator:  
Jul 11 14:28:45 mailserver random: Initializing random number generator:  succeeded
Jul 11 14:28:45 mailserver random:
Jul 11 14:28:45 mailserver rc: Starting random:  succeeded
Jul 11 14:28:46 mailserver keytable: Loading keymap:
Jul 11 14:28:47 mailserver keytable: Loading keymap:  succeeded
Jul 11 14:28:47 mailserver keytable:
Jul 11 14:28:47 mailserver keytable: Loading system font:  
Jul 11 14:28:47 mailserver keytable: Loading system font:  succeeded
Jul 11 14:28:47 mailserver keytable:
Jul 11 14:28:47 mailserver rc: Starting keytable:  succeeded
Jul 11 14:28:48 mailserver rc: Starting bootstrap-console:  succeeded
Jul 11 14:28:49 mailserver oidentd: Starting identd:
Jul 11 14:28:50 mailserver oidentd: oidentd startup succeeded
Jul 11 14:28:50 mailserver oidentd: ^[[60G
Jul 11 14:28:50 mailserver oidentd:
Jul 11 14:28:50 mailserver rc: Starting oidentd:  succeeded
Jul 11 14:28:51 mailserver rc: Starting masq:  succeeded
Jul 11 14:28:52 mailserver network: Setting network parameters:  
Jul 11 14:28:52 mailserver sysctl: kernel.sysrq = 0
Jul 11 14:28:52 mailserver sysctl: net.ipv4.conf.all.rp_filter = 1
Jul 11 14:28:52 mailserver sysctl: net.ipv4.conf.default.rp_filter = 1
Jul 11 14:28:52 mailserver sysctl: net.ipv4.ip_dynaddr = 1
Jul 11 14:28:52 mailserver sysctl: net.ipv4.ip_forward = 1
Jul 11 14:28:52 mailserver sysctl: net.ipv4.tcp_keepalive_time = 300
Jul 11 14:28:52 mailserver sysctl: net.ipv4.tcp_syncookies = 1
Jul 11 14:28:52 mailserver network: Setting network parameters:  succeeded
Jul 11 14:28:52 mailserver network:
Jul 11 14:28:52 mailserver network: Bringing up loopback interface:  
Jul 11 14:28:54 mailserver network: Bringing up loopback interface:  succeeded
Jul 11 14:28:54 mailserver network:
Jul 11 14:28:54 mailserver network: Bringing up interface eth0:  
Jul 11 14:28:55 mailserver kernel: 8139too Fast Ethernet driver 0.9.26
Jul 11 14:28:55 mailserver kernel: PCI: Found IRQ 11 for device 00:09.0
Jul 11 14:28:55 mailserver kernel: divert: allocating divert_blk for eth0
Jul 11 14:28:55 mailserver kernel: eth0: RealTek RTL8139 Fast Ethernet at 0xd8888000, 00:30:84:87:b1:65, IRQ 11
Jul 11 14:28:55 mailserver kernel: eth0:  Identified 8139 chip type 'RTL-8139C'
Jul 11 14:28:55 mailserver kernel: PCI: Found IRQ 10 for device 00:0a.0
Jul 11 14:28:55 mailserver kernel: divert: allocating divert_blk for eth1
Jul 11 14:28:55 mailserver kernel: eth1: RealTek RTL8139 Fast Ethernet at 0xd888a000, 00:a0:d2:a5:55:ba, IRQ 10
Jul 11 14:28:55 mailserver kernel: eth1:  Identified 8139 chip type 'RTL-8139B'
Jul 11 14:28:55 mailserver kernel: eth0: Setting 100mbps full-duplex based on auto-negotiated partner ability 45e1.
Jul 11 14:28:58 mailserver network: Bringing up interface eth0:  succeeded
Jul 11 14:28:58 mailserver network:
Jul 11 14:28:58 mailserver rc: Starting network:  succeeded
Jul 11 14:28:59 mailserver crond: Starting crond:
Jul 11 14:28:59 mailserver crond: crond startup succeeded
Jul 11 14:28:59 mailserver crond:
Jul 11 14:29:00 mailserver rc: Starting crond:  succeeded
Jul 11 14:29:00 mailserver rc: Starting dhcpcd:  succeeded
Jul 11 14:29:02 mailserver xinetd: Starting xinetd:
Jul 11 14:29:02 mailserver xinetd[896]: xinetd Version 2.3.11 started with libwrap loadavg options compiled in.
Jul 11 14:29:02 mailserver xinetd[896]: Started working: 0 available services
Jul 11 14:29:05 mailserver xinetd: xinetd startup succeeded
Jul 11 14:29:05 mailserver xinetd: ^[[60G
Jul 11 14:29:05 mailserver xinetd:
Jul 11 14:29:05 mailserver rc: Starting xinetd:  succeeded
Jul 11 14:29:06 mailserver dnscache: Starting dnscache:
Jul 11 14:29:07 mailserver dnscache: Starting dnscache succeeded
Jul 11 14:29:07 mailserver dnscache:
Jul 11 14:29:07 mailserver rc: Starting dnscache:  succeeded
Jul 11 14:29:08 mailserver imap: Starting imap:
Jul 11 14:29:09 mailserver imap: Starting imap succeeded
Jul 11 14:29:09 mailserver imap:
Jul 11 14:29:09 mailserver rc: Starting imap:  succeeded
Jul 11 14:29:10 mailserver rc: Starting ippp:  succeeded
Jul 11 14:29:11 mailserver popd: Starting popd:
Jul 11 14:29:13 mailserver popd: Starting popd succeeded
Jul 11 14:29:13 mailserver popd:
Jul 11 14:29:13 mailserver rc: Starting popd:  succeeded
Jul 11 14:29:14 mailserver tinydns: Starting tinydns:
Jul 11 14:29:15 mailserver tinydns: Starting tinydns succeeded
Jul 11 14:29:15 mailserver tinydns:
Jul 11 14:29:15 mailserver rc: Starting tinydns:  succeeded
Jul 11 14:29:16 mailserver rc: Starting diald:  succeeded
Jul 11 14:29:17 mailserver rc: Starting pppoe:  succeeded
Jul 11 14:29:18 mailserver lpd: Starting lpd:
Jul 11 14:29:18 mailserver lpd: lpd startup succeeded
Jul 11 14:29:18 mailserver lpd:
Jul 11 14:29:18 mailserver rc: Starting lpd:  succeeded
Jul 11 14:29:19 mailserver rc: Starting dhcpd:  succeeded
Jul 11 14:29:20 mailserver ldap: Starting slapd:
Jul 11 14:29:21 mailserver slapd[1226]: daemon: socket() failed errno=97 (Address family not supported by protocol)
Jul 11 14:29:22 mailserver ldap: slapd startup succeeded
Jul 11 14:29:22 mailserver ldap:
Jul 11 14:29:22 mailserver slapd[1234]: slapd starting
Jul 11 14:29:23 mailserver rc: Starting ldap:  succeeded
Jul 11 14:29:24 mailserver rc: Starting ntpd:  succeeded
Jul 11 14:29:25 mailserver qmail: Starting qmail:
Jul 11 14:29:26 mailserver qmail: Starting qmail succeeded
Jul 11 14:29:26 mailserver qmail:
Jul 11 14:29:26 mailserver rc: Starting qmail:  succeeded
Jul 11 14:29:27 mailserver httpd-e-smith: Starting httpd:
Jul 11 14:29:31 mailserver httpd-e-smith: httpd startup succeeded
Jul 11 14:29:31 mailserver httpd-e-smith:
Jul 11 14:29:33 mailserver rc: Starting httpd-e-smith:  succeeded
Jul 11 14:29:34 mailserver smtpfront-qmail: Starting smtpfront-qmail:
Jul 11 14:29:35 mailserver smtpfront-qmail: Starting smtpfront-qmail succeeded
Jul 11 14:29:36 mailserver smtpfront-qmail:
Jul 11 14:29:36 mailserver rc: Starting smtpfront-qmail:  succeeded
Jul 11 14:29:37 mailserver spamassassin: Starting spamd:
Jul 11 14:29:46 mailserver spamassassin: spamd startup succeeded
Jul 11 14:29:46 mailserver spamassassin:
Jul 11 14:29:46 mailserver rc: Starting spamassassin:  succeeded
Jul 11 14:29:48 mailserver sshd: Starting sshd:
Jul 11 14:29:48 mailserver sshd:  succeeded
Jul 11 14:29:48 mailserver sshd:
Jul 11 14:29:48 mailserver rc: Starting sshd:  succeeded
Jul 11 14:29:48 mailserver sshd[1464]: Server listening on 0.0.0.0 port 22.
Jul 11 14:29:51 mailserver httpd-admin: Starting httpd-admin:
Jul 11 14:29:56 mailserver httpd-admin: httpd-admin startup succeeded
Jul 11 14:29:56 mailserver httpd-admin:
Jul 11 14:29:58 mailserver rc: Starting httpd-admin:  succeeded
Jul 11 14:29:59 mailserver mysqld: Starting MySQL:  succeeded
Jul 11 14:30:01 mailserver su(pam_unix)[1697]: session opened for user qmailr by (uid=0)
Jul 11 14:30:03 mailserver squid: Starting squid:
Jul 11 14:30:03 mailserver squid: ^[[60G
Jul 11 14:30:03 mailserver squid:
Jul 11 14:30:03 mailserver rc: Starting squid:  succeeded
Jul 11 14:30:03 mailserver squid[1765]: Squid Parent: child process 1768 started
Jul 11 14:30:06 mailserver atalk: Starting AppleTalk services: (backgrounded)
Jul 11 14:30:06 mailserver rc: Starting atalk:  succeeded
Jul 11 14:30:07 mailserver kernel: NET4: AppleTalk 0.18a for Linux NET4.0
Jul 11 14:30:07 mailserver atalkd[1808]: restart (1.5.5)
Jul 11 14:30:08 mailserver atalkd[1808]: zip_getnetinfo for eth0
Jul 11 14:30:08 mailserver smb: Starting smbd:
Jul 11 14:30:10 mailserver smbd: Starting smbd succeeded
Jul 11 14:30:10 mailserver smb:
Jul 11 14:30:10 mailserver smb: Starting nmbd:
Jul 11 14:30:11 mailserver nmbd: Starting nmbd succeeded
Jul 11 14:30:11 mailserver smb:
Jul 11 14:30:11 mailserver rc: Starting smb:  succeeded
Jul 11 14:30:12 mailserver snmpd: snmpd startup succeeded
Jul 11 14:30:14 mailserver clamd: Starting clamd:
Jul 11 14:30:17 mailserver atalkd[1808]: zip_getnetinfo for eth0
Jul 11 14:30:20 mailserver ucd-snmp[1888]: UCD-SNMP version 4.2.5
Jul 11 14:30:22 mailserver ucd-snmp[1888]: Connection from 127.0.0.1
Jul 11 14:30:22 mailserver ucd-snmp[1888]: Received SNMP packet(s) from 127.0.0.1
Jul 11 14:30:22 mailserver ucd-snmp[1888]: /proc/stat buffer increased to 384
Jul 11 14:30:22 mailserver ucd-snmp[1888]: Connection from 127.0.0.1
Jul 11 14:30:22 mailserver su(pam_unix)[1697]: session closed for user qmailr
Jul 11 14:30:23 mailserver last message repeated 5 times
Jul 11 14:30:27 mailserver atalkd[1808]: zip_getnetinfo for eth0
Jul 11 14:30:28 mailserver clamd: clamd startup succeeded
Jul 11 14:30:28 mailserver clamd:
Jul 11 14:30:28 mailserver rc: Starting clamd:  succeeded
Jul 11 14:30:30 mailserver sysmon: Starting sysmon daemon:
Jul 11 14:30:33 mailserver sysmon: Damonizing sysmon...
Jul 11 14:30:33 mailserver sysmon: sysmon startup succeeded
Jul 11 14:30:33 mailserver sysmon:
Jul 11 14:30:33 mailserver rc: Starting sysmon:  succeeded
Jul 11 14:30:36 mailserver e-smith[2011]: Processing event: local
Jul 11 14:30:36 mailserver e-smith[2011]: Running event handler: /etc/e-smith/events/local/S06conf-lilo
Jul 11 14:30:37 mailserver atalkd[1808]: config for no router
Jul 11 14:30:38 mailserver atalkd[1808]: ready 0/0/0
Jul 11 14:30:38 mailserver atalk: atalkd startup succeeded
Jul 11 14:30:39 mailserver e-smith[2011]: S06conf-lilo=action|Event|local|Action|S06conf-lilo|Start|1121092236 114826|End|1121092239 318413|Elapsed|3.203587
Jul 11 14:30:39 mailserver pptpd[2034]: MGR: Manager process started
Jul 11 14:30:52 mailserver atalk: papd startup succeeded
Jul 11 14:30:52 mailserver papd[2061]: restart (1.5.5)
Jul 11 14:30:52 mailserver atalk: afpd startup succeeded
Jul 11 14:30:58 mailserver afpd[2066]: mailserver:AFPServer@* started on 65280.5:128 (1.5.5)
Jul 11 14:30:58 mailserver afpd[2066]: ASIP started on 192.9.200.3:548(2) (1.5.5)
Jul 11 14:30:58 mailserver afpd[2066]: uam: loading (/usr/lib/uams_dhx.so)
Jul 11 14:30:58 mailserver afpd[2066]: uam: uams_dhx.so loaded
Jul 11 14:30:58 mailserver afpd[2066]: uam: loading (/usr/lib/uams_pgp.so)
Jul 11 14:30:58 mailserver afpd[2066]: uam: uams_pgp.so loaded
Jul 11 14:30:58 mailserver afpd[2066]: uam: "PGPuam 1.0" available
Jul 11 14:30:58 mailserver afpd[2066]: uam: "DHCAST128" available
Jul 11 14:35:00 mailserver su(pam_unix)[2180]: session opened for user qmailr by (uid=0)
Jul 11 14:35:04 mailserver ucd-snmp[1888]: Connection from 127.0.0.1
Jul 11 14:40:00 mailserver su(pam_unix)[2590]: session opened for user qmailr by (uid=0)
Jul 11 14:40:01 mailserver su(pam_unix)[2590]: session closed for user qmailr
Jul 11 14:40:06 mailserver last message repeated 8 times

[CharlieBrady]

Fire up Midnight Commander (mc at prompt) and open up the messages log and search for fetchmail, otherwise run:

cat /var/log/messages | grep fetchmail

to get a listing to the screen of any fetchmail references in the log file; ...

Or just use the filtering feature of the view log files panel of the server manager.

[smeghead]

true, forgot that was there ..

[Jasonuocs]

Ah right sorry, will do that in a bit! thanks

[Jasonuocs]

Hi All, Sorry for the delay... Just had the customer threaten me with a big baseball bat to get this sorted out!!!

Jul 12 14:21:27 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[18763]: /home/e-smith/configuration: OLD fetchmail=service|FreqOffice|every5min|FreqOutside|every5min|FreqWeekend|every5min|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 12 14:21:27 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[18763]: /home/e-smith/configuration: NEW fetchmail=service|FreqOffice|everyhour|FreqOutside|every5min|FreqWeekend|every5min|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 12 14:21:27 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[18763]: /home/e-smith/configuration: OLD fetchmail=service|FreqOffice|everyhour|FreqOutside|every5min|FreqWeekend|every5min|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 12 14:21:27 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[18763]: /home/e-smith/configuration: NEW fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|every5min|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 12 14:21:27 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[18763]: /home/e-smith/configuration: OLD fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|every5min|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 12 14:21:27 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[18763]: /home/e-smith/configuration: NEW fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 12 16:24:23 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[10448]: /home/e-smith/configuration: OLD fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 12 16:24:23 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[10448]: /home/e-smith/configuration: NEW fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|sfds|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 12 16:24:23 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[10448]: /home/e-smith/configuration: OLD fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|sfds|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 12 16:24:23 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[10448]: /home/e-smith/configuration: NEW fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|sfds|SecondaryMailPassword|sdfs|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 14 11:50:14 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[2008]: /home/e-smith/configuration: OLD fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|sfds|SecondaryMailPassword|sdfs|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 14 11:50:14 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[2008]: /home/e-smith/configuration: NEW fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|sdfs|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 14 11:50:14 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[2008]: /home/e-smith/configuration: OLD fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|sdfs|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 14 11:50:14 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[2008]: /home/e-smith/configuration: NEW fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 14 11:53:30 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[2235]: /home/e-smith/configuration: OLD fetchmail=service|FreqOffice|everyhour|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 14 11:53:30 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[2235]: /home/e-smith/configuration: NEW fetchmail=service|FreqOffice|every5min|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 14 11:53:30 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[2235]: /home/e-smith/configuration: OLD fetchmail=service|FreqOffice|every5min|FreqOutside|everyhour|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 14 11:53:30 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[2235]: /home/e-smith/configuration: NEW fetchmail=service|FreqOffice|every5min|FreqOutside|every5min|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 14 11:53:30 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[2235]: /home/e-smith/configuration: OLD fetchmail=service|FreqOffice|every5min|FreqOutside|every5min|FreqWeekend|everyhour|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled
Jul 14 11:53:30 mailserver /etc/e-smith/web/panels/manager/cgi-bin/emailsettings[2235]: /home/e-smith/configuration: NEW fetchmail=service|FreqOffice|every5min|FreqOutside|every5min|FreqWeekend|every5min|Method|multidrop|SecondaryMailAccount|****|SecondaryMailPassword|******|SecondaryMailServer|mail.******.co.uk|status|enabled

[lproven]

I have no help to offer, but I thought I'd add to your cry for help. I am at a client's right now & their SME Server (6.0.1 with all updates) is refunbsing to accept incoming mail (POP3) or send outgoing (SMTP). Outlook comes up with the famous "server unexpectedly disconnected" message; Thunderbird sends cleanly but nothing ever arrives & incoming messages don't appear either.

Using T'bird:

Looking in /var/log/imap/current shows the connections from the client; that seems fine.

Looking in /var/log/smtpfront-qmail shows the outgoing messages *apparently* going -- but they don't arrive.

Using Outlook 2000 SP3:

Both log files completely silent.

Currently, I'm baffled.

[CharlieBrady]

Looking in /var/log/smtpfront-qmail shows the outgoing messages *apparently* going -- but they don't arrive.

From smtpfront-qmail they only go to qmail (or something else, perhaps spamassassin or clamd if you have contribs installed). You need to follow "the paper path" to solve email problems.