Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Graham on January 20, 2003, 10:52:47 PM

Title: Who is trying to test my SMTP server?
Post by: Graham on January 20, 2003, 10:52:47 PM

Hi All,

I searched the forum (all dates) and could not find anything regarding my current problem.

I have just noticed that on almost a daily basis that openrc@blueyonder.co.uk is trying to send an email to itself.  The following is an extract from my smtpfront-qmail log:

2003-01-12 10:13:12.996840500 smtpfront-qmail[10124]: MAIL FROM:.
2003-01-12 10:13:13.019572500 smtpfront-qmail[10124]: RCPT TO:.
2003-01-12 10:13:13.019655500 smtpfront-qmail[10124]: Sorry, that domain isn't in my list of allowed rcpthosts..
2003-01-12 10:13:44.250921500 smtpfront-qmail[10124]: bytes in: 100 bytes out: 197.

Where do I find out the IP address of the server trying to connect to me?  I have looked through other log files but I can't seem to find it.

Thanks in advance.

Graham

Title: Re: Who is trying to test my SMTP server?
Post by: Jochen Hoegerl on January 21, 2003, 12:24:16 AM

Try this, and get their admins some work ;-))


Please report all abuse by or from the blueyonder, Cable Internet, Telewest Broadband or Telewest Eurobell networks to abuse@blueyonder.co.uk.

Title: Re: Who is trying to test my SMTP server?
Post by: Graham on January 21, 2003, 12:32:51 AM

Thanks,

The only reason that I haven't done that is I am not sure if it is blueyonder themselves that are trying to test my server as they are my ISP.

Title: Re: Who is trying to test my SMTP server?
Post by: steve on January 21, 2003, 01:01:19 AM

I sounds to me like they are testing your mail server to see if it is an open relay
my isp, roadrunner, does this periodically

steve

Title: Re: Who is trying to test my SMTP server?
Post by: Graham on January 21, 2003, 01:05:44 AM

I also thought that may be the case, but I wanted to find out the IP address of the connecting server to check.  I am running SME5.5 at the moment and I know that such connections were logged under 5.2 and I would presume that the same would be true of 5.5, but I can't find it.

Title: Re: Who is trying to test my SMTP server?
Post by: Bob Todd on January 21, 2003, 01:25:00 AM

are they aware you are running a server? Do they allow u to run a server on their network - sure I read somewhere they frown on it due to the load it places on their system.

Title: Re: Who is trying to test my SMTP server?
Post by: Graham on January 21, 2003, 01:38:13 AM

I don't think that they are bothered with mail servers, they don't even mind webservers as long as they are password protected.