Topic: Who is trying to test my SMTP server?

[Graham]

Hi All,

I searched the forum (all dates) and could not find anything regarding my current problem.

I have just noticed that on almost a daily basis that openrc@blueyonder.co.uk is trying to send an email to itself.  The following is an extract from my smtpfront-qmail log:

2003-01-12 10:13:12.996840500 smtpfront-qmail[10124]: MAIL FROM:.
2003-01-12 10:13:13.019572500 smtpfront-qmail[10124]: RCPT TO:.
2003-01-12 10:13:13.019655500 smtpfront-qmail[10124]: Sorry, that domain isn't in my list of allowed rcpthosts..
2003-01-12 10:13:44.250921500 smtpfront-qmail[10124]: bytes in: 100 bytes out: 197.

Where do I find out the IP address of the server trying to connect to me?  I have looked through other log files but I can't seem to find it.

Thanks in advance.

Graham

[Jochen Hoegerl]

Try this, and get their admins some work )


Please report all abuse by or from the blueyonder, Cable Internet, Telewest Broadband or Telewest Eurobell networks to abuse@blueyonder.co.uk.

[Graham]

Thanks,

The only reason that I haven't done that is I am not sure if it is blueyonder themselves that are trying to test my server as they are my ISP.

[steve]

I sounds to me like they are testing your mail server to see if it is an open relay
my isp, roadrunner, does this periodically

steve

[Graham]

I also thought that may be the case, but I wanted to find out the IP address of the connecting server to check.  I am running SME5.5 at the moment and I know that such connections were logged under 5.2 and I would presume that the same would be true of 5.5, but I can't find it.

[Bob Todd]

are they aware you are running a server? Do they allow u to run a server on their network - sure I read somewhere they frown on it due to the load it places on their system.

[Graham]

I don't think that they are bothered with mail servers, they don't even mind webservers as long as they are password protected.