Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: icpix on March 23, 2004, 11:07:22 AM

Title: message log : Connection... Successful lookup... qmailr
Post by: icpix on March 23, 2004, 11:07:22 AM

Since the clean install of SME server 6.0 and subsequent update to 6.0.1 I have been seeing entries like the following...

Mar 23 04:14:18 systa oidentd[20114]: Connection from mx3.Level3.com (209.245.18.135):64426
Mar 23 04:14:18 systa oidentd[20114]: [mx3.Level3.com] Successful lookup: 38190 , 25 : qmailr (qmailr)

...appearing in the message log. Am curious as to:
1) what this means, is my server being checked out or checked over... for some hack?
2) what is it that they are doing to provoke this log entry?

Title: message log : Connection... Successful lookup... qmailr
Post by: raem on March 23, 2004, 03:25:22 PM

Yes I see similar entries also.
Perhaps the answer is here in these search results

http://www.google.com.au/search?hl=en&ie=UTF-8&oe=UTF-8&q=Successful+lookup%3A+*****+%3A+qmailr+%28qmailr%29+&meta=

http://www.catfive.org/cgi-bin/man2web?program=qmail-tcpto&section=8

I think that these are unsuccessful attempts at establishing a connection, but if someone with more knowledge would confirm, that would be appreciated.

Regs
Ray