From: Roman Novak - (no email)
Date: Mon Jan 01 2007 - 08:01:30 EST
Michael Wang wrote:
> Roman Novak wrote:
>> Hello.
>>
>> In last 2 weeks i am noticing enormous amounts of strange
>> connections to mail server from all over the world. An example from
>> logs:
>>
>> Jan 1 13:09:03 mercury postfix/smtpd[22974]: connect from
>> 157.Red-81-33-236.dynamicIP.rima-tde.net[81.33.236.157]
>> Jan 1 13:09:03 mercury postfix/smtpd[22974]: lost connection after
>> EHLO from 157.Red-81-33-236.dynamicIP.rima-tde.net[81.33.236.157]
>> Jan 1 13:09:03 mercury postfix/smtpd[22974]: disconnect from
>> 157.Red-81-33-236.dynamicIP.rima-tde.net[81.33.236.157]
>>
>>
>> Transcript of session follows.
>>
>> Out: 220 mercury.mydomain.net ESMTP something
>> In: EHLO
>> Out: 501 Syntax: EHLO hostname
>>
>> Session aborted, reason: lost connection
>
> Do you have reject_invalid_helo_hostname or reject_invalid_hostname
> somewhere in your main.cf file?
No, i don't have these parameters in main.cf
Roman
|
|
|