Server constantly sending out some thing!
Hi all,
In my last few days, or nearly two weeks I guess, my server is sending out some thing constanly. Do you know what is that? may be this is FlashBack behaviour?
And I check Activity Monitor\ Disk Activity almost is equal 0, and Activity Monitor\ Network is almost sending out.
I hope this is not virus or malware!
Any help is appriciate, thanks!
Hi Hoffman,
I truly appreciate the time you are taking to assist me, great helper as usuall!
I am using latest Snow Leopard 10.6.8, included fixs from Apple about FlashBack.
I also look to the logs but did not find any unusual (at least with me) just one thing I found is too many message "
mail:status = "list-updated"" repeating on 10 or 5 minutes basic when I am not enable Mail service at all.
I running a wiki for internal use but never config any mail service from inside wiki or in Server Admin GUI
Below I attached part of console message and the IPFW rules list
CONSOLE MESSAGE
4/14/12 12:20:10 AM com.apple.wikid.mailinglists[99923] mail:status = "list-updated"
4/14/12 12:30:11 AM com.apple.wikid.mailinglists[242] mail:status = "list-updated"
4/14/12 12:40:10 AM com.apple.wikid.mailinglists[461] mail:status = "list-updated"
4/14/12 12:50:10 AM com.apple.wikid.mailinglists[657] mail:status = "list-updated"
4/14/12 1:00:11 AM com.apple.wikid.mailinglists[1207] mail:status = "list-updated"
4/14/12 1:10:10 AM com.apple.wikid.mailinglists[1402] mail:status = "list-updated"
4/14/12 1:20:10 AM com.apple.wikid.mailinglists[1601] mail:status = "list-updated"
4/14/12 1:30:10 AM com.apple.wikid.mailinglists[1801] mail:status = "list-updated"
4/14/12 1:40:10 AM com.apple.wikid.mailinglists[1997] mail:status = "list-updated"
4/14/12 1:50:10 AM com.apple.wikid.mailinglists[2194] mail:status = "list-updated"
4/14/12 2:00:11 AM com.apple.wikid.mailinglists[2744] mail:status = "list-updated"
4/14/12 2:10:10 AM com.apple.wikid.mailinglists[2939] mail:status = "list-updated"
4/14/12 2:15:26 AM com.apple.learnjunkmail[3038] Can't find GUID for junk mail user junkmail
4/14/12 2:15:26 AM com.apple.learnjunkmail[3038] No GUID found for: junkmail
4/14/12 2:15:26 AM com.apple.launchd[1] (com.apple.learnjunkmail[3038]) Exited with exit code: 1
4/14/12 2:20:10 AM com.apple.wikid.mailinglists[3142] mail:status = "list-updated"
4/14/12 2:30:10 AM com.apple.wikid.mailinglists[3340] mail:status = "list-updated"
4/14/12 2:30:12 AM com.apple.launchd[1] (com.apple.updatesa[3341]) Exited with exit code: 1
4/14/12 2:40:10 AM com.apple.wikid.mailinglists[3538] mail:status = "list-updated"
4/14/12 2:50:10 AM com.apple.wikid.mailinglists[3737] mail:status = "list-updated"
4/14/12 3:00:11 AM com.apple.wikid.mailinglists[4287] mail:status = "list-updated"
4/14/12 3:10:10 AM com.apple.wikid.mailinglists[4483] mail:status = "list-updated"
4/14/12 3:15:25 AM com.apple.launchd[1] (com.apple.wikid.logcompressor[4589]) posix_spawn("/usr/bin/logcompressor.sh", ...): No such file or directory
4/14/12 3:15:25 AM com.apple.launchd[1] (com.apple.wikid.logcompressor[4589]) Exited with exit code: 1
4/14/12 3:20:10 AM com.apple.wikid.mailinglists[4793] mail:status = "list-updated"
4/14/12 3:30:10 AM com.apple.wikid.mailinglists[4992] mail:status = "list-updated"
4/14/12 3:40:10 AM com.apple.wikid.mailinglists[5189] mail:status = "list-updated"
4/14/12 3:50:10 AM com.apple.wikid.mailinglists[5386] mail:status = "list-updated"
4/14/12 4:00:11 AM com.apple.wikid.mailinglists[5939] mail:status = "list-updated"
4/14/12 4:10:10 AM com.apple.wikid.mailinglists[6134] mail:status = "list-updated"
4/14/12 4:20:10 AM com.apple.wikid.mailinglists[6331] mail:status = "list-updated"
4/14/12 4:30:10 AM com.apple.wikid.mailinglists[6531] mail:status = "list-updated"
4/14/12 4:40:10 AM com.apple.wikid.mailinglists[6727] mail:status = "list-updated"
4/14/12 4:50:11 AM com.apple.wikid.mailinglists[6925] mail:status = "list-updated"
4/14/12 5:00:11 AM com.apple.wikid.mailinglists[7506] mail:status = "list-updated"
SUDO IPFW LIST
00001 allow udp from any 626 to any dst-port 626
00010 divert 8668 ip from any to any via ppp0
01000 allow ip from any to any via lo0
01040 deny log logamount 1000 ip from 127.0.0.0/8 to any in in
01050 deny log logamount 1000 ip from any to 127.0.0.0/8 in
01060 deny log logamount 1000 ip from 224.0.0.0/4 to any in
01070 deny log logamount 1000 ip from any to 224.0.0.0/4 in
01080 deny log logamount 1000 ip from any to 10.0.0.0/8 in in
01090 deny log logamount 1000 ip from 10.0.0.0/8 to any in out
12300 allow tcp from any to any established
12301 allow tcp from any to any out
12302 allow tcp from any to any dst-port 22
12302 allow udp from any to any dst-port 22
12303 allow udp from any to any out keep-state
12304 allow tcp from any to any dst-port 53 out keep-state
12304 allow udp from any to any dst-port 53 out keep-state
12305 allow udp from any to any dst-port 1701
12306 allow gre from any to any
12307 allow esp from any to any
12308 allow tcp from any to any dst-port 1723
12309 allow udp from any to any dst-port 4500
12310 allow udp from any to any dst-port 500
12311 allow udp from any to any dst-port 67
12312 allow udp from any to any dst-port 68
12313 allow tcp from any to any dst-port 53
12313 allow udp from any to any dst-port 53
12314 allow tcp from 192.168.1.0/26 to any out
12315 allow tcp from 192.168.1.0/26 to any established
12316 allow udp from 192.168.1.0/26 to any out keep-state
12317 allow udp from 192.168.1.0/26 to any dst-port 138
12318 allow udp from 192.168.1.0/26 to any dst-port 137
12319 allow tcp from 192.168.1.0/26 to any dst-port 139
12320 allow tcp from 192.168.1.0/26 to any dst-port 143
12321 allow gre from 192.168.1.0/26 to any
12322 allow icmp from 192.168.1.0/26 to any
12323 allow tcp from 192.168.1.0/26 to any dst-port 110
12323 allow udp from 192.168.1.0/26 to any dst-port 110
12324 allow tcp from 192.168.1.0/26 to any dst-port 111
12324 allow udp from 192.168.1.0/26 to any dst-port 111
12325 allow tcp from 192.168.1.0/26 to any dst-port 113
12326 allow tcp from 192.168.1.0/26 to any dst-port 119
12327 allow tcp from 192.168.1.0/26 to any dst-port 115
12328 allow tcp from 192.168.1.0/26 to any dst-port 123
12328 allow udp from 192.168.1.0/26 to any dst-port 123
12329 allow tcp from 192.168.1.0/26 to any dst-port 16080
12330 allow udp from 192.168.1.0/26 to any dst-port 161
12331 allow tcp from 192.168.1.0/26 to any dst-port 1694
12332 allow udp from 192.168.1.0/26 to any dst-port 192
12333 allow tcp from 192.168.1.0/26 to any dst-port 2000
12334 allow tcp from 192.168.1.0/26 to any dst-port 20-21
12335 allow tcp from 192.168.1.0/26 to any dst-port 2049
12335 allow udp from 192.168.1.0/26 to any dst-port 2049
12336 allow tcp from 192.168.1.0/26 to any dst-port 25
12336 allow udp from 192.168.1.0/26 to any dst-port 25
12337 allow tcp from 192.168.1.0/26 to any dst-port 3031
12337 allow udp from 192.168.1.0/26 to any dst-port 3031
12338 allow tcp from 192.168.1.0/26 to any dst-port 311
12339 allow tcp from 192.168.1.0/26 to any dst-port 3283,5900
12339 allow udp from 192.168.1.0/26 to any dst-port 3283,5900
12340 allow tcp from 192.168.1.0/26 to any dst-port 3306
12341 allow tcp from 192.168.1.0/26 to any dst-port 445
12342 allow tcp from 192.168.1.0/26 to any dst-port 389
12342 allow udp from 192.168.1.0/26 to any dst-port 389
12343 allow tcp from 192.168.1.0/26 to any dst-port 443
12344 allow tcp from 192.168.1.0/26 to any dst-port 427
12344 allow udp from 192.168.1.0/26 to any dst-port 427
12345 allow tcp from 192.168.1.0/26 to any dst-port 497
12345 allow udp from 192.168.1.0/26 to any dst-port 497
12346 allow tcp from 192.168.1.0/26 to any dst-port 465
12347 allow udp from 192.168.1.0/26 to any dst-port 513
12348 allow udp from 192.168.1.0/26 to any dst-port 514
12349 allow tcp from 192.168.1.0/26 to any dst-port 515
12349 allow udp from 192.168.1.0/26 to any dst-port 515
12350 allow tcp from 192.168.1.0/26 to any dst-port 53
12350 allow udp from 192.168.1.0/26 to any dst-port 53
12351 allow tcp from 192.168.1.0/26 to any dst-port 53 out keep-state
12351 allow udp from 192.168.1.0/26 to any dst-port 53 out keep-state
12352 allow tcp from 192.168.1.0/26 to any dst-port 532
12352 allow udp from 192.168.1.0/26 to any dst-port 532
12353 allow tcp from 192.168.1.0/26 to any dst-port 5433
12354 allow tcp from 192.168.1.0/26 to any dst-port 587
12355 allow tcp from 192.168.1.0/26 to any dst-port 631
12355 allow udp from 192.168.1.0/26 to any dst-port 631
12356 allow tcp from 192.168.1.0/26 to any dst-port 625
12357 allow tcp from 192.168.1.0/26 to any dst-port 636
12358 allow udp from 192.168.1.0/26 to any dst-port 67
12359 allow udp from 192.168.1.0/26 to any dst-port 68
12360 allow tcp from 192.168.1.0/26 to any dst-port 7
12360 allow udp from 192.168.1.0/26 to any dst-port 7
12361 allow tcp from 192.168.1.0/26 to any dst-port 79
12361 allow udp from 192.168.1.0/26 to any dst-port 79
12362 allow tcp from 192.168.1.0/26 to any dst-port 80
12363 allow tcp from 192.168.1.0/26 to any dst-port 88
12363 allow udp from 192.168.1.0/26 to any dst-port 88
12364 allow tcp from 192.168.1.0/26 to any dst-port 985
12365 allow tcp from 192.168.1.0/26 to any dst-port 993
12366 allow tcp from 192.168.1.0/26 to any dst-port 995
12366 allow udp from 192.168.1.0/26 to any dst-port 995
12367 allow icmp from 192.168.1.0/26 to any icmptypes 0
12368 allow icmp from 192.168.1.0/26 to any icmptypes 3,4,11,12
12369 allow icmp from 192.168.1.0/26 to any icmptypes 8
12370 allow tcp from 192.168.1.0/26 to any dst-port 8080
12371 allow tcp from 192.168.1.0/26 to any dst-port 8088
12372 allow tcp from 192.168.1.0/26 to any dst-port 9006,8080,8443
12373 allow tcp from 192.168.1.0/26 to any dst-port 1812
12374 allow tcp from 192.168.1.0/26 to any dst-port 135
12375 allow tcp from 192.168.1.0/26 to any dst-port 749
12375 allow udp from 192.168.1.0/26 to any dst-port 749
12376 allow tcp from 192.168.1.0/26 to any dst-port 22
12376 allow udp from 192.168.1.0/26 to any dst-port 22
12377 allow tcp from 192.168.1.0/26 to any dst-port 514
12378 allow tcp from 192.168.1.0/26 to any dst-port 201-208
12379 allow tcp from 192.168.1.0/26 to any dst-port 3389
12380 allow esp from 192.168.1.0/26 to any
12381 allow udp from 192.168.1.0/26 to any dst-port 500
12382 allow udp from 192.168.1.0/26 to any dst-port 4500
12383 allow tcp from 192.168.1.0/26 to any dst-port 548
12384 allow udp from 192.168.1.0/26 to any dst-port 1701
12385 allow tcp from 192.168.1.0/26 to any dst-port 1723
12386 allow tcp from 192.168.1.0/26 to any dst-port 8081
63200 deny log logamount 1000 icmp from any to any in icmptypes 0,8
63300 deny log logamount 1000 igmp from any to any in
65000 deny log logamount 1000 tcp from any to any in setup
65001 deny log logamount 1000 udp from any to any in
65534 deny log logamount 1000 ip from any to any
65535 allow ip from any to any
Similar Messages
-
was making the update for my iphone 4s . then he stops. My phone in this time is in the recovery mode and do not take the firmware to open my phone, please can u help me to recover my phone. My current ios 6.0.1. plese send me some thing that is useful
Thanks for that 'sberman' - because my iPhone is backed-up to my work computer (only at this stage) I have had to call our IT Department in Adleaide. (4 times this morning). The last guy managed to get the phone into 'DFU Mode' - no more recovery mode screen - (kind of 'asleep' perhaps) from my understanding of same. I am awaiting a call again from IT so they can get my computer to actually recognise my iPhone on the C Drive. This also happened to one of my colleagues in Newman (WA). She got so frustrated with the whole process that she bought another phone the next time she was in 'civilisation.' She hasn't had any problems since. (Cross fingers).
Thanks again, Sandra2474. -
Snow Leopard Server possibly sending out spam
Hi Everyone-
I have the option checked in Server Admin to send an account on my server a copy of all the undeliverable mail. This morning, I wake up and there's 400+ new emails from Mail Delivery Subsystem saying things like Mail timed out.
My server isn't setup as a relay and I require authentication, but it seems like I'm sending out spam email. The email is coming from [email protected], even though there's no account with that email address.
Here's a sample out of mail.log:
Apr 22 17:44:49 mail postfix/smtp[21153]: DA72E115D4C: to=<[email protected]>, relay=none, delay=34129, delays=34098/0.05/30/0, dsn=4.4.1, status=deferred (connect to lycos.com.my[216.8.179.23]:25: Operation timed out)
Any ideas?
Thanks!Spam mail is still being sent. Web service is off. There is no user alias or user for "Paypal".
Here is a pretty long chunk of Mail.log:
Apr 23 10:14:04 mail postfix/smtp[5645]: connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out
Apr 23 10:14:04 mail postfix/smtp[5645]: 04D1411D814: to=<[email protected]>, relay=none, delay=11149, delays=11119/0.04/30/0, dsn=4.4.1, status=deferred (connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out)
Apr 23 10:14:04 mail postfix/smtp[5645]: 04D1411D814: to=<[email protected]>, relay=none, delay=11149, delays=11119/0.04/30/0, dsn=4.4.1, status=deferred (connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out)
Apr 23 10:16:57 mail postfix/smtpd[5710]: connect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:16:58 mail postfix/smtpd[5710]: lost connection after EHLO from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:16:58 mail postfix/smtpd[5710]: disconnect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:18:34 mail postfix/qmgr[123]: 1A95F11DCE5: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:18:34 mail postfix/qmgr[123]: 3607611DC9A: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:18:34 mail postfix/smtp[5738]: 3607611DC9A: host mx1.mail.eu.yahoo.com[77.238.177.9] refused to talk to me: 421 4.7.0 [TS01] Messages from 24.227.121.138 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
Apr 23 10:18:35 mail postfix/smtp[5738]: 3607611DC9A: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11052, delays=11051/0.04/0.62/0, dsn=4.7.0, status=deferred (host mx2.mail.eu.yahoo.com[77.238.184.241] refused to talk to me: 421 4.7.0 [TS01] Messages from 24.227.121.138 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html)
Apr 23 10:19:04 mail postfix/smtp[5733]: connect to eden.com[71.103.248.51]:25: Operation timed out
Apr 23 10:19:04 mail postfix/smtp[5733]: 1A95F11DCE5: to=<[email protected]>, relay=none, delay=11067, delays=11037/0.02/30/0, dsn=4.4.1, status=deferred (connect to eden.com[71.103.248.51]:25: Operation timed out)
Apr 23 10:19:04 mail postfix/smtp[5734]: connect to sonnyclean.teradyne.com[206.114.21.197]:25: Operation timed out
Apr 23 10:19:04 mail postfix/smtp[5736]: connect to hq.tcfarm.com[216.8.179.23]:25: Operation timed out
Apr 23 10:19:04 mail postfix/smtp[5736]: 3607611DC9A: to=<[email protected]>, relay=none, delay=11082, delays=11051/0.03/30/0, dsn=4.4.1, status=deferred (connect to hq.tcfarm.com[216.8.179.23]:25: Operation timed out)
Apr 23 10:19:34 mail postfix/smtp[5734]: connect to mrsclean.teradyne-agoura.com[206.114.21.196]:25: Operation timed out
Apr 23 10:20:04 mail postfix/smtp[5734]: connect to hazelclean.teradyne.com[198.51.251.107]:25: Operation timed out
Apr 23 10:20:18 mail postfix/anvil[5714]: statistics: max connection rate 1/60s for (submission:166.137.138.184) at Apr 23 10:16:57
Apr 23 10:20:18 mail postfix/anvil[5714]: statistics: max connection count 1 for (submission:166.137.138.184) at Apr 23 10:16:57
Apr 23 10:20:18 mail postfix/anvil[5714]: statistics: max cache size 1 at Apr 23 10:16:57
Apr 23 10:20:34 mail postfix/smtp[5734]: connect to mrclean.teradyne.com[198.51.251.105]:25: Operation timed out
Apr 23 10:20:34 mail postfix/smtp[5734]: 1A95F11DCE5: to=<[email protected]>, relay=none, delay=11157, delays=11037/0.03/120/0, dsn=4.4.1, status=deferred (connect to mrclean.teradyne.com[198.51.251.105]:25: Operation timed out)
Apr 23 10:27:23 mail postfix/smtpd[5887]: connect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:27:23 mail postfix/trivial-rewrite[5892]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:27:23 mail postfix/smtpd[5887]: F166111ECD4: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:27:27 mail postfix/smtpd[5887]: 60F8511ECD5: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:27:27 mail postfix/cleanup[5893]: 60F8511ECD5: message-id=<010401cae2f1$1b4ac0c0$51e04240$@com>
Apr 23 10:27:27 mail postfix/qmgr[123]: 60F8511ECD5: from=<[email protected]>, size=5783, nrcpt=2 (queue active)
Apr 23 10:27:27 mail postfix/smtpd[5887]: disconnect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:27:27 mail postfix/smtpd[5896]: connect from localhost[127.0.0.1]
Apr 23 10:27:27 mail postfix/trivial-rewrite[5892]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:27:27 mail postfix/smtpd[5896]: D06C211ECE6: client=localhost[127.0.0.1]
Apr 23 10:27:27 mail postfix/cleanup[5893]: D06C211ECE6: message-id=<010401cae2f1$1b4ac0c0$51e04240$@com>
Apr 23 10:27:27 mail postfix/smtpd[5896]: disconnect from localhost[127.0.0.1]
Apr 23 10:27:27 mail postfix/qmgr[123]: D06C211ECE6: from=<[email protected]>, size=6184, nrcpt=3 (queue active)
Apr 23 10:27:27 mail postfix/smtp[5894]: 60F8511ECD5: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.5, delays=0.1/0.01/0/0.39, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as D06C211ECE6)
Apr 23 10:27:27 mail postfix/smtp[5894]: 60F8511ECD5: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.5, delays=0.1/0.01/0/0.39, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as D06C211ECE6)
Apr 23 10:27:27 mail postfix/qmgr[123]: 60F8511ECD5: removed
Apr 23 10:27:27 mail postfix/pipe[5901]: D06C211ECE6: to=<[email protected]>, relay=dovecot, delay=0.07, delays=0.01/0.05/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:27:27 mail postfix/pipe[5903]: D06C211ECE6: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.09, delays=0.01/0.05/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:27:32 mail postfix/smtp[5899]: D06C211ECE6: to=<[email protected]>, relay=itbsg.com[72.34.46.140]:25, delay=4.2, delays=0.01/0.05/0.43/3.7, dsn=2.0.0, status=sent (250 OK id=1O5Jqt-0006Z8-NK)
Apr 23 10:27:32 mail postfix/qmgr[123]: D06C211ECE6: removed
Apr 23 10:28:20 mail postfix/smtpd[5887]: connect from elasmtp-kukur.atl.sa.earthlink.net[209.86.89.65]
Apr 23 10:28:20 mail postfix/trivial-rewrite[5920]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:28:20 mail postfix/smtpd[5887]: 75C4211ECF4: client=elasmtp-kukur.atl.sa.earthlink.net[209.86.89.65]
Apr 23 10:28:20 mail postfix/cleanup[5893]: 75C4211ECF4: message-id=<328F6752485D4E16BCD6E4090060D04B@jc2010>
Apr 23 10:28:20 mail postfix/qmgr[123]: 75C4211ECF4: from=<[email protected]>, size=4041, nrcpt=2 (queue active)
Apr 23 10:28:20 mail postfix/smtpd[5887]: disconnect from elasmtp-kukur.atl.sa.earthlink.net[209.86.89.65]
Apr 23 10:28:21 mail postfix/smtpd[5896]: connect from localhost[127.0.0.1]
Apr 23 10:28:21 mail postfix/smtpd[5896]: 16E9911ED01: client=localhost[127.0.0.1]
Apr 23 10:28:21 mail postfix/cleanup[5893]: 16E9911ED01: message-id=<328F6752485D4E16BCD6E4090060D04B@jc2010>
Apr 23 10:28:21 mail postfix/smtpd[5896]: disconnect from localhost[127.0.0.1]
Apr 23 10:28:21 mail postfix/qmgr[123]: 16E9911ED01: from=<[email protected]>, size=4651, nrcpt=3 (queue active)
Apr 23 10:28:21 mail postfix/smtp[5894]: 75C4211ECF4: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.83, delays=0.26/0/0/0.57, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-09, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 16E9911ED01)
Apr 23 10:28:21 mail postfix/smtp[5894]: 75C4211ECF4: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.83, delays=0.26/0/0/0.57, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-09, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 16E9911ED01)
Apr 23 10:28:21 mail postfix/qmgr[123]: 75C4211ECF4: removed
Apr 23 10:28:21 mail postfix/pipe[5901]: 16E9911ED01: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:28:21 mail postfix/pipe[5903]: 16E9911ED01: to=<[email protected]>, relay=dovecot, delay=0.04, delays=0.01/0/0/0.03, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:28:21 mail postfix/pipe[5901]: 16E9911ED01: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.04, delays=0.01/0.01/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:28:21 mail postfix/qmgr[123]: 16E9911ED01: removed
Apr 23 10:28:34 mail postfix/qmgr[123]: B27E811D8CA: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:28:34 mail postfix/smtp[5899]: connect to domcollect.mailrejector.com[188.40.178.59]:25: Connection refused
Apr 23 10:28:34 mail postfix/smtp[5899]: B27E811D8CA: to=<[email protected]>, relay=none, delay=11960, delays=11959/0.01/0.25/0, dsn=4.4.1, status=deferred (connect to domcollect.mailrejector.com[188.40.178.59]:25: Connection refused)
Apr 23 10:28:34 mail postfix/smtp[5933]: connect to lycos.co.uk[209.202.254.14]:25: Connection refused
Apr 23 10:28:34 mail postfix/smtp[5933]: B27E811D8CA: to=<[email protected]>, relay=none, delay=11960, delays=11959/0.03/0.35/0, dsn=4.4.1, status=deferred (connect to lycos.co.uk[209.202.254.14]:25: Connection refused)
Apr 23 10:28:34 mail postfix/smtp[5930]: B27E811D8CA: to=<[email protected]>, relay=lists.meds.com[209.131.124.44]:25, delay=11960, delays=11959/0.02/0.32/0.07, dsn=5.1.1, status=bounced (host lists.meds.com[209.131.124.44] said: 550 5.1.1 <[email protected]>... User unknown (in reply to RCPT TO command))
Apr 23 10:28:34 mail postfix/smtp[5929]: connect to boystuff.co.uk[194.154.164.82]:25: Connection refused
Apr 23 10:28:34 mail postfix/smtp[5929]: B27E811D8CA: to=<[email protected]>, relay=none, delay=11960, delays=11959/0.02/0.39/0, dsn=4.4.1, status=deferred (connect to boystuff.co.uk[194.154.164.82]:25: Connection refused)
Apr 23 10:29:04 mail postfix/smtp[5934]: connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out
Apr 23 10:29:04 mail postfix/smtp[5934]: B27E811D8CA: to=<[email protected]>, relay=none, delay=11990, delays=11959/0.04/30/0, dsn=4.4.1, status=deferred (connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out)
Apr 23 10:29:04 mail postfix/cleanup[5893]: 3E9FA11ED0F: message-id=<[email protected]>
Apr 23 10:29:04 mail postfix/bounce[5936]: B27E811D8CA: sender non-delivery notification: 3E9FA11ED0F
Apr 23 10:29:04 mail postfix/qmgr[123]: 3E9FA11ED0F: from=, size=12629, nrcpt=1 (queue active)
Apr 23 10:29:04 mail postfix/local[5900]: error: od[getpwnam_ext]: No record for user paypal
Apr 23 10:29:04 mail postfix/pipe[5925]: 3E9FA11ED0F: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:29:04 mail postfix/qmgr[123]: 3E9FA11ED0F: removed
Apr 23 10:29:22 mail postfix/smtpd[5887]: connect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:29:22 mail postfix/trivial-rewrite[5954]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:29:22 mail postfix/smtpd[5887]: CDDB811ED14: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:29:26 mail postfix/smtpd[5887]: 2A3BF11ED15: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:29:26 mail postfix/cleanup[5893]: 2A3BF11ED15: message-id=<010901cae2f1$6222bd40$266837c0$@com>
Apr 23 10:29:26 mail postfix/qmgr[123]: 2A3BF11ED15: from=<[email protected]>, size=1347, nrcpt=2 (queue active)
Apr 23 10:29:26 mail postfix/smtpd[5887]: disconnect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:29:26 mail postfix/smtpd[5896]: connect from localhost[127.0.0.1]
Apr 23 10:29:26 mail postfix/smtpd[5896]: 6666811ED20: client=localhost[127.0.0.1]
Apr 23 10:29:26 mail postfix/cleanup[5893]: 6666811ED20: message-id=<010901cae2f1$6222bd40$266837c0$@com>
Apr 23 10:29:26 mail postfix/smtpd[5896]: disconnect from localhost[127.0.0.1]
Apr 23 10:29:26 mail postfix/qmgr[123]: 6666811ED20: from=<[email protected]>, size=1748, nrcpt=3 (queue active)
Apr 23 10:29:26 mail postfix/smtp[5894]: 2A3BF11ED15: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.29, delays=0.09/0/0/0.2, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-05, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6666811ED20)
Apr 23 10:29:26 mail postfix/smtp[5894]: 2A3BF11ED15: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.29, delays=0.09/0/0/0.2, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-05, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6666811ED20)
Apr 23 10:29:26 mail postfix/qmgr[123]: 2A3BF11ED15: removed
Apr 23 10:29:26 mail postfix/pipe[5901]: 6666811ED20: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:29:26 mail postfix/pipe[5903]: 6666811ED20: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:29:26 mail postfix/pipe[5925]: 6666811ED20: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.05, delays=0.01/0.01/0/0.03, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:29:26 mail postfix/qmgr[123]: 6666811ED20: removed
Apr 23 10:32:46 mail postfix/anvil[5891]: statistics: max connection rate 1/60s for (smtp:72.188.101.178) at Apr 23 10:27:23
Apr 23 10:32:46 mail postfix/anvil[5891]: statistics: max connection count 1 for (smtp:72.188.101.178) at Apr 23 10:27:23
Apr 23 10:32:46 mail postfix/anvil[5891]: statistics: max cache size 2 at Apr 23 10:28:20
Apr 23 10:33:34 mail postfix/qmgr[123]: 86DD811E1EC: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:33:34 mail postfix/smtp[6036]: connect to onion.com[168.143.174.97]:25: Connection refused
Apr 23 10:33:34 mail postfix/smtp[6036]: 86DD811E1EC: to=<[email protected]>, relay=none, delay=10988, delays=10988/0.04/0.12/0, dsn=4.4.1, status=deferred (connect to onion.com[168.143.174.97]:25: Connection refused)
Apr 23 10:33:41 mail postfix/smtpd[6039]: connect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:33:42 mail postfix/smtpd[6039]: lost connection after EHLO from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:33:42 mail postfix/smtpd[6039]: disconnect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:33:46 mail postfix/smtp[6032]: 86DD811E1EC: to=<[email protected]>, relay=none, delay=11000, delays=10988/0.03/12/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=finor.com type=MX: Host not found, try again)
Apr 23 10:34:04 mail postfix/smtp[6031]: connect to enterprise.america.com[68.178.232.99]:25: Operation timed out
Apr 23 10:34:04 mail postfix/smtp[6031]: 86DD811E1EC: to=<[email protected]>, relay=none, delay=11018, delays=10988/0.02/30/0, dsn=4.4.1, status=deferred (connect to enterprise.america.com[68.178.232.99]:25: Operation timed out)
Apr 23 10:34:04 mail postfix/smtp[6037]: connect to seo411.com[69.64.155.15]:25: Operation timed out
Apr 23 10:34:04 mail postfix/smtp[6037]: 86DD811E1EC: to=<[email protected]>, relay=none, delay=11018, delays=10988/0.05/30/0, dsn=4.4.1, status=deferred (connect to seo411.com[69.64.155.15]:25: Operation timed out)
Apr 23 10:34:04 mail postfix/smtp[6035]: connect to gnn.com[205.188.100.58]:25: Operation timed out
Apr 23 10:34:34 mail postfix/smtp[6035]: connect to gnn.com[64.12.79.57]:25: Operation timed out
Apr 23 10:35:04 mail postfix/smtp[6035]: connect to gnn.com[207.200.74.38]:25: Operation timed out
Apr 23 10:35:04 mail postfix/smtp[6035]: 86DD811E1EC: to=<[email protected]>, relay=none, delay=11078, delays=10988/0.03/90/0, dsn=4.4.1, status=deferred (connect to gnn.com[207.200.74.38]:25: Operation timed out)
Apr 23 10:37:02 mail postfix/anvil[6041]: statistics: max connection rate 1/60s for (submission:166.137.138.184) at Apr 23 10:33:41
Apr 23 10:37:02 mail postfix/anvil[6041]: statistics: max connection count 1 for (submission:166.137.138.184) at Apr 23 10:33:41
Apr 23 10:37:02 mail postfix/anvil[6041]: statistics: max cache size 1 at Apr 23 10:33:41
Apr 23 10:38:55 mail postfix/smtpd[6134]: connect from web50903.mail.re2.yahoo.com[206.190.38.123]
Apr 23 10:38:55 mail postfix/trivial-rewrite[6139]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:38:55 mail postfix/smtpd[6134]: 81B5111ED6B: client=web50903.mail.re2.yahoo.com[206.190.38.123]
Apr 23 10:38:55 mail postfix/cleanup[6140]: 81B5111ED6B: message-id=<[email protected]>
Apr 23 10:38:55 mail postfix/qmgr[123]: 81B5111ED6B: from=<[email protected]>, size=11541, nrcpt=2 (queue active)
Apr 23 10:38:55 mail postfix/smtpd[6134]: disconnect from web50903.mail.re2.yahoo.com[206.190.38.123]
Apr 23 10:38:56 mail postfix/smtpd[6143]: connect from localhost[127.0.0.1]
Apr 23 10:38:56 mail postfix/smtpd[6143]: 383D711ED78: client=localhost[127.0.0.1]
Apr 23 10:38:56 mail postfix/cleanup[6140]: 383D711ED78: message-id=<[email protected]>
Apr 23 10:38:56 mail postfix/smtpd[6143]: disconnect from localhost[127.0.0.1]
Apr 23 10:38:56 mail postfix/qmgr[123]: 383D711ED78: from=<[email protected]>, size=11942, nrcpt=3 (queue active)
Apr 23 10:38:56 mail postfix/smtp[6141]: 81B5111ED6B: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.5/0.01/0/0.57, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-10, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 383D711ED78)
Apr 23 10:38:56 mail postfix/smtp[6141]: 81B5111ED6B: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.5/0.01/0/0.57, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-10, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 383D711ED78)
Apr 23 10:38:56 mail postfix/qmgr[123]: 81B5111ED6B: removed
Apr 23 10:38:56 mail postfix/pipe[6147]: 383D711ED78: to=<[email protected]>, relay=dovecot, delay=0.08, delays=0.01/0.04/0/0.03, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:38:56 mail postfix/pipe[6149]: 383D711ED78: to=<[email protected]>, relay=dovecot, delay=0.09, delays=0.01/0.05/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:38:56 mail postfix/pipe[6152]: 383D711ED78: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.09, delays=0.01/0.06/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:38:56 mail postfix/qmgr[123]: 383D711ED78: removed
Apr 23 10:39:09 mail postfix/smtpd[6134]: connect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:39:09 mail postfix/trivial-rewrite[6155]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:39:09 mail postfix/smtpd[6134]: 635B511ED7F: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:39:12 mail postfix/smtpd[6134]: C24D411ED80: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:39:12 mail postfix/cleanup[6140]: C24D411ED80: message-id=<010a01cae2f2$bfc34950$3f49dbf0$@com>
Apr 23 10:39:12 mail postfix/qmgr[123]: C24D411ED80: from=<[email protected]>, size=8809, nrcpt=2 (queue active)
Apr 23 10:39:12 mail postfix/smtpd[6134]: disconnect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:39:13 mail postfix/smtpd[6143]: connect from localhost[127.0.0.1]
Apr 23 10:39:13 mail postfix/trivial-rewrite[6155]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:39:13 mail postfix/smtpd[6143]: 8D7F011ED91: client=localhost[127.0.0.1]
Apr 23 10:39:13 mail postfix/cleanup[6140]: 8D7F011ED91: message-id=<010a01cae2f2$bfc34950$3f49dbf0$@com>
Apr 23 10:39:13 mail postfix/smtpd[6143]: disconnect from localhost[127.0.0.1]
Apr 23 10:39:13 mail postfix/qmgr[123]: 8D7F011ED91: from=<[email protected]>, size=9210, nrcpt=3 (queue active)
Apr 23 10:39:13 mail postfix/smtp[6141]: C24D411ED80: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.83, delays=0.12/0/0/0.71, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-06, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 8D7F011ED91)
Apr 23 10:39:13 mail postfix/smtp[6141]: C24D411ED80: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.83, delays=0.12/0/0/0.71, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-06, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 8D7F011ED91)
Apr 23 10:39:13 mail postfix/qmgr[123]: C24D411ED80: removed
Apr 23 10:39:13 mail postfix/pipe[6149]: 8D7F011ED91: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:39:13 mail postfix/pipe[6147]: 8D7F011ED91: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.05, delays=0.01/0/0/0.04, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:39:18 mail postfix/smtp[6157]: 8D7F011ED91: host ninja1.spamninjas.com[71.43.194.115] said: 451 4.7.1 <[email protected]>: Recipient address rejected: Greylisted for 5 minutes (in reply to RCPT TO command)
Apr 23 10:39:30 mail postfix/smtp[6157]: 8D7F011ED91: to=<[email protected]>, relay=ninja2.spamninjas.com[72.19.140.201]:25, delay=17, delays=0.01/0.02/5.4/11, dsn=4.7.1, status=deferred (host ninja2.spamninjas.com[72.19.140.201] said: 451 4.7.1 <[email protected]>: Recipient address rejected: Greylisted for 5 minutes (in reply to RCPT TO command))
Apr 23 10:40:51 mail postfix/smtpd[6134]: connect from ecbiz71.inmotionhosting.com[173.205.124.201]
Apr 23 10:40:51 mail postfix/trivial-rewrite[6191]: warning: do not list domain 4RSmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:40:51 mail postfix/smtpd[6134]: CED4A11ED9F: client=ecbiz71.inmotionhosting.com[173.205.124.201]
Apr 23 10:40:51 mail postfix/cleanup[6140]: CED4A11ED9F: message-id=<[email protected]>
Apr 23 10:40:51 mail postfix/qmgr[123]: CED4A11ED9F: from=<[email protected]>, size=9492, nrcpt=2 (queue active)
Apr 23 10:40:52 mail postfix/smtpd[6134]: disconnect from ecbiz71.inmotionhosting.com[173.205.124.201]
Apr 23 10:40:52 mail postfix/smtpd[6143]: connect from localhost[127.0.0.1]
Apr 23 10:40:52 mail postfix/smtpd[6143]: 6B83111EDB5: client=localhost[127.0.0.1]
Apr 23 10:40:52 mail postfix/cleanup[6140]: 6B83111EDB5: message-id=<[email protected]>
Apr 23 10:40:52 mail postfix/smtpd[6143]: disconnect from localhost[127.0.0.1]
Apr 23 10:40:52 mail postfix/qmgr[123]: 6B83111EDB5: from=<[email protected]>, size=9893, nrcpt=3 (queue active)
Apr 23 10:40:52 mail postfix/smtp[6141]: CED4A11ED9F: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.58/0/0/0.5, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-11, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6B83111EDB5)
Apr 23 10:40:52 mail postfix/smtp[6141]: CED4A11ED9F: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.58/0/0/0.5, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-11, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6B83111EDB5)
Apr 23 10:40:52 mail postfix/qmgr[123]: CED4A11ED9F: removed
Apr 23 10:40:52 mail postfix/pipe[6149]: 6B83111EDB5: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:40:52 mail postfix/pipe[6149]: 6B83111EDB5: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.13, delays=0.01/0.02/0/0.1, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:40:52 mail postfix/pipe[6147]: 6B83111EDB5: to=<[email protected]>, relay=dovecot, delay=0.13, delays=0.01/0/0/0.12, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:40:52 mail postfix/qmgr[123]: 6B83111EDB5: removed
Apr 23 10:43:34 mail postfix/qmgr[123]: 4BB8111D76B: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:43:47 mail postfix/smtp[6240]: 4BB8111D76B: to=<[email protected]>, relay=none, delay=13025, delays=13012/0.02/13/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=twbg.co.uk type=MX: Host not found, try again)
Apr 23 10:44:12 mail postfix/anvil[6138]: statistics: max connection rate 1/60s for (smtp:206.190.38.123) at Apr 23 10:38:55
Apr 23 10:44:12 mail postfix/anvil[6138]: statistics: max connection count 1 for (smtp:206.190.38.123) at Apr 23 10:38:55
Apr 23 10:44:12 mail postfix/anvil[6138]: statistics: max cache size 2 at Apr 23 10:39:09
Apr 23 10:48:20 mail postfix/smtpd[6320]: connect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:48:21 mail postfix/smtpd[6320]: lost connection after EHLO from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:48:21 mail postfix/smtpd[6320]: disconnect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:48:34 mail postfix/qmgr[123]: 3711011DA69: from=<[email protected]>, size=10726, nrcpt=2 (queue active)
Apr 23 10:48:34 mail postfix/qmgr[123]: 56E4F11DAC5: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:48:34 mail postfix/qmgr[123]: 5CC8B11E265: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:48:34 mail postfix/qmgr[123]: 8D7F011ED91: from=<[email protected]>, size=9210, nrcpt=3 (queue active)
Apr 23 10:48:34 mail postfix/qmgr[123]: CAA4E11D93C: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:48:34 mail postfix/smtp[6328]: connect to lycos.co.uk[209.202.254.14]:25: Connection refused
Apr 23 10:48:34 mail postfix/smtp[6328]: 56E4F11DAC5: to=<[email protected]>, relay=none, delay=12967, delays=12967/0.01/0.1/0, dsn=4.4.1, status=deferred (connect to lycos.co.uk[209.202.254.14]:25: Connection refused)
Apr 23 10:48:34 mail postfix/smtp[6332]: connect to sylvester.faho.rwth-aachen.de[134.130.57.2]:25: Connection refused
Apr 23 10:48:34 mail postfix/smtp[6332]: 56E4F11DAC5: to=<[email protected]>, relay=none, delay=12967, delays=12967/0.04/0.26/0, dsn=4.4.1, status=deferred (connect to sylvester.faho.rwth-aachen.de[134.130.57.2]:25: Connection refused)
Apr 23 10:48:34 mail postfix/smtp[6335]: 5CC8B11E265: host mx1.mail.eu.yahoo.com[77.238.177.9] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:48:35 mail postfix/smtp[6337]: connect to mail.suchknecht.at[62.93.251.235]:25: Connection refused
Apr 23 10:48:35 mail postfix/smtp[6337]: CAA4E11D93C: to=<[email protected]>, relay=none, delay=13115, delays=13115/0.07/0.59/0, dsn=4.4.1, status=deferred (connect to mail.suchknecht.at[62.93.251.235]:25: Connection refused)
Apr 23 10:48:35 mail postfix/smtp[6336]: 8D7F011ED91: to=<[email protected]>, relay=ninja1.spamninjas.com[71.43.194.115]:25, delay=562, delays=561/0.07/0.12/0.58, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as ECE28106F97)
Apr 23 10:48:35 mail postfix/qmgr[123]: 8D7F011ED91: removed
Apr 23 10:48:35 mail postfix/smtp[6327]: 3711011DA69: to=<[email protected]>, relay=h.mx.mail.yahoo.com[66.94.236.34]:25, delay=13006, delays=13005/0.02/0.38/0.62, dsn=5.7.5, status=bounced (host h.mx.mail.yahoo.com[66.94.236.34] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:35 mail postfix/cleanup[6340]: 7D22411EDF0: message-id=<[email protected]>
Apr 23 10:48:35 mail postfix/bounce[6339]: 3711011DA69: sender non-delivery notification: 7D22411EDF0
Apr 23 10:48:35 mail postfix/qmgr[123]: 7D22411EDF0: from=, size=12888, nrcpt=1 (queue active)
Apr 23 10:48:35 mail postfix/qmgr[123]: 3711011DA69: removed
Apr 23 10:48:35 mail postfix/local[6341]: error: od[getpwnam_ext]: No record for user paypal
Apr 23 10:48:35 mail postfix/pipe[6342]: 7D22411EDF0: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0.01/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:48:35 mail postfix/qmgr[123]: 7D22411EDF0: removed
Apr 23 10:48:36 mail postfix/smtp[6330]: 56E4F11DAC5: host www.poleboy.de[62.75.143.131] said: 451 Temporary local problem - please try later (in reply to RCPT TO command)
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:41 mail postfix/smtp[6330]: 56E4F11DAC5: to=<[email protected]>, relay=poleboy.de[62.75.143.131]:25, delay=12975, delays=12967/0.03/2.2/5.1, dsn=4.0.0, status=deferred (host poleboy.de[62.75.143.131] said: 451 Temporary local problem - please try later (in reply to RCPT TO command))
Apr 23 10:48:47 mail postfix/smtp[6331]: 56E4F11DAC5: to=<[email protected]>, relay=none, delay=12980, delays=12967/0.04/13/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=sanffo.co.uk type=MX: Host not found, try again)
Apr 23 10:48:47 mail postfix/smtp[6333]: 5CC8B11E265: to=<[email protected]>, relay=none, delay=11651, delays=11638/0.05/13/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=alyssiasgrove.co.uk type=MX: Host not found, try again)
Apr 23 10:49:04 mail postfix/smtp[6329]: connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out
Apr 23 10:49:04 mail postfix/smtp[6329]: 56E4F11DAC5: to=<[email protected]>, relay=none, delay=12997, delays=12967/0.02/30/0, dsn=4.4.1, status=deferred (connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out)
Apr 23 10:49:04 mail postfix/smtp[6334]: connect to nationalvoice.org[216.8.179.23]:25: Operation timed out
Apr 23 10:49:04 mail postfix/smtp[6334]: 5CC8B11E265: to=<[email protected]>, relay=none, delay=11669, delays=11638/0.05/30/0, dsn=4.4.1, status=deferred (connect to nationalvoice.org[216.8.179.23]:25: Operation timed out)
Apr 23 10:49:04 mail postfix/cleanup[6340]: E0FE911EDF8: message-id=<[email protected]>
Apr 23 10:49:04 mail postfix/bounce[6339]: 5CC8B11E265: sender non-delivery notification: E0FE911EDF8
Apr 23 10:49:04 mail postfix/qmgr[123]: E0FE911EDF8: from=, size=29336, nrcpt=1 (queue active)
Apr 23 10:49:04 mail postfix/local[6341]: error: od[getpwnam_ext]: No record for user paypal
Apr 23 10:49:04 mail postfix/pipe[6342]: E0FE911EDF8: to=<[email protected]>, relay=dovecot, delay=0.02, delays=0.01/0/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:49:04 mail postfix/qmgr[123]: E0FE911EDF8: removed
Apr 23 10:51:41 mail postfix/anvil[6324]: statistics: max connection rate 1/60s for (submission:166.137.138.184) at Apr 23 10:48:20
Apr 23 10:51:41 mail postfix/anvil[6324]: statistics: max connection count 1 for (submission:166.137.138.184) at Apr 23 10:48:20
Apr 23 10:51:41 mail postfix/anvil[6324]: statistics: max cache size 1 at Apr 23 10:48:20
Apr 23 10:53:34 mail postfix/qmgr[123]: 5318011DDFB: from=<[email protected]>, size=10710, nrcpt=2 (queue active)
Apr 23 10:53:34 mail postfix/qmgr[123]: 7723311DE03: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:53:34 mail postfix/qmgr[123]: A63AD11DDCA: from=<[email protected]>, size=10704, nrcpt=2 (queue active)
Apr 23 10:53:34 mail postfix/qmgr[123]: BC71311DCA6: from=<[email protected]>, size=10708, nrcpt=2 (queue active)
Apr 23 10:53:34 mail postfix/qmgr[123]: CA71611DDD3: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:53:34 mail postfix/qmgr[123]: F07E311DCDD: from=<[email protected]>, size=10706, nrcpt=2 (queue active)
Apr 23 10:53:34 mail postfix/smtp[6435]: connect to lycos.co.uk[209.202.254.14]:25: Connection refused
Apr 23 10:53:34 mail postfix/smtp[6435]: 7723311DE03: to=<[email protected]>, relay=none, delay=12957, delays=12957/0.03/0.06/0, dsn=4.4.1, status=deferred (connect to lycos.co.uk[209.202.254.14]:25: Connection refused)
Apr 23 10:53:34 mail postfix/smtp[6435]: 7723311DE03: to=<[email protected]>, relay=none, delay=12957, delays=12957/0.03/0.06/0, dsn=4.4.1, status=deferred (connect to lycos.co.uk[209.202.254.14]:25: Connection refused)
Apr 23 10:53:34 mail postfix/smtp[6432]: 5318011DDFB: host d.mx.mail.yahoo.com[209.191.88.254] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:34 mail postfix/smtp[6438]: 7723311DE03: host mx1.mail.eu.yahoo.com[77.238.177.9] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:35 mail postfix/smtp[6439]: A63AD11DDCA: host mx2.mail.eu.yahoo.com[77.238.184.241] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:35 mail postfix/smtp[6444]: F07E311DCDD: to=<[email protected]>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=13138, delays=13137/0.07/0.12/0.53, dsn=5.7.5, status=bounced (host e.mx.mail.yahoo.com[67.195.168.230] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:53:35 mail postfix/cleanup[6447]: 367E111EE16: message-id=<[email protected]>
Apr 23 10:53:35 mail postfix/bounce[6446]: F07E311DCDD: sender non-delivery notification: 367E111EE16
Apr 23 10:53:35 mail postfix/qmgr[123]: 367E111EE16: from=, size=12840, nrcpt=1 (queue active)
Apr 23 10:53:35 mail postfix/qmgr[123]: F07E311DCDD: removed
Apr 23 10:53:35 mail postfix/local[6448]: error: od[getpwnam_ext]: No record for user paypal
Apr 23 10:53:35 mail postfix/pipe[6449]: 367E111EE16: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0.01/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:53:35 mail postfix/qmgr[123]: 367E111EE16: removed
Apr 23 10:53:35 mail postfix/smtp[6432]: 5318011DDFB: host a.mx.mail.yahoo.com[67.195.168.31] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:35 mail postfix/smtp[6440]: BC71311DCA6: host h.mx.mail.yahoo.com[66.94.236.34] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:35 mail postfix/smtp[6440]: BC71311DCA6: host d.mx.mail.yahoo.com[209.191.88.254] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:35 mail postfix/smtp[6433]: 7723311DE03: to=<[email protected]>, relay=mx1.bt.mail.yahoo.com[212.82.111.207]:25, delay=12958, delays=12957/0.02/0.58/0.86, dsn=5.7.5, status=bounced (host mx1.bt.mail.yahoo.com[212.82.111.207] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command)) -
Help my Exchange 2013 server is sending out thousands of spam mails!
Hi all,
today i noticed that my Exchange server was using 100% cpu and memory.I noticed that edgetransport service was using all the resource.
Then i opened queue viewer and saw thousands of mails in the queue.Then then get the annoying message that it cannot show more than 1000 messages.I click ok and stop the refreshing.I could mark all e-mails and choose suspend,but after that it starts to refresh
and same annoying message keeps popup (cant display more than 1000 messages)
So i have blocked all incoming port 25 on my TMG and also blocked all trafic out from the mail server.
I than ran the following command on My exchange server : Remove-Message -Server mail01 -filter {status -eq "suspended"} -WithNDR $false
Doesnt seem it helped,since there are still over 1k messages in the queue!
I deleted the queue folder under C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\ and it re-created new folder.Still all queue arent removed.
How can i remove all messages in the queue viewer?
I also find it strange why outsiders manage to relay on my server,since i only set allow for couple of internal servers?
Scanned those and no virus there (i dont use those servers to download anything)
any advice please?
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2workWould take me to much time to remove one ID by one,since i had over 3k in the queue.
Ended up with the following command:
Remove-Message -Filter {FromAddress -like "*@*"} -WithNDR $false
Remove-Message -Filter {FromAddress -like "*<>*"} -WithNDR $false
First will remove all messages that contains @
Second will remove all messages that contains <> (seems like lots had this in fromaddress)
Then finally all gone and cpu and mem back to normal.
Now have to find a way to block all IPs from China and Russia on my TMG!
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work -
OSX server sending out "spam?"
I'm a student at a technical college and am working part time for the Mac admin guy. We have about 400 macs in the art dept. Yesterday our sysadmin said our server was sending out spam.
This server is not running mail but here are a couple of excerpts from our mail.log:
Aug 7 06:40:38 servername postfix/pickup[14340]: 547BE6B7AB8: uid=1032 from=<image>
Aug 7 06:40:38 servername postfix/cleanup[14552]: 547BE6B7AB8: message-id=<20070807114037.547BE6B7AB8@servername>
Aug 7 06:40:38 servername postfix/qmgr[14556]: 547BE6B7AB8: from=<[email protected]>, size=1675, nrcpt=1 (queue active)
Aug 7 06:40:45 servername postfix/smtp[14557]: 547BE6B7AB8: host g.mx.mail.yahoo.com[206.190.53.191] said: 421 Message temporarily deferred - 4.16.51. Please refer to http://help.yahoo.com/help/us/mail/defer/defer-06.html (in reply to end of DATA command)
Aug 7 06:40:45 servername postfix/smtp[14557]: 547BE6B7AB8: to=<[email protected]>, relay=d.mx.mail.yahoo.com[216.39.53.2], delay=8, status=sent (250 ok dirdel)
Aug 7 06:40:45 servername postfix/qmgr[14556]: 547BE6B7AB8: removed
Aug 7 06:44:23 servername postfix/pickup[14340]: C0F876B7AC2: uid=1032 from=<image>
Aug 7 06:44:23 servername postfix/cleanup[14600]: C0F876B7AC2:message-id=<20070807114423.C0F876B7AC2@servername>
Aug 7 06:44:23 servername postfix/qmgr[14556]: C0F876B7AC2: from=<[email protected]>, size=1626, nrcpt=1 (queue active)
Aug 7 06:44:23 servername postfix/pickup[14340]: C8D2C6B7AC4: uid=1032 from=<image>
Aug 7 06:44:23 servername postfix/cleanup[14600]: C8D2C6B7AC4: message-id=<20070807114423.C8D2C6B7AC4@servername>
Aug 7 06:44:23 servername postfix/pickup[14340]: CEC0B6B7AC6: uid=1032 from=<image>
Aug 7 06:44:23 servername postfix/cleanup[14600]: CEC0B6B7AC6:message-id=<20070807114423.CEC0B6B7AC6@servername>
Aug 7 06:44:23 servername postfix/qmgr[14556]: C0F876B7AC2: to=<[email protected]>, relay=none, delay=0, status=bounced (invalid recipient syntax: "[email protected]")
Aug 7 06:44:23 servername postfix/qmgr[14556]: C8D2C6B7AC4: from=<[email protected]>, size=1624, nrcpt=1 (queue active)
Aug 7 06:44:23 servername postfix/cleanup[14600]: DA8706B7AC9: message-id=<20070807114423.DA8706B7AC9@servername>
and
Aug 8 10:11:57 servername postfix/qmgr2338: DADE98C3EB9: to=<[email protected]>, relay=none, delay=14040, status=deferred (delivery temporarily suspended: host ironport1.chron.comhttp://130.80.29.15 refused to talk to me: 554 ironport1.chron.com)
Aug 8 10:11:57 servername postfix/qmgr2338: E89098C1C03: to=<[email protected]>, relay=none, delay=14082, status=deferred (delivery temporarily suspended: host ironport1.chron.comhttp://130.80.29.15 refused to talk to me: 554 ironport1.chron.com)
Aug 8 10:11:57 servername postfix/qmgr2338: EEE378C2CB3: to=<[email protected]>, relay=none, delay=14231, status=deferred (delivery temporarily suspended: host ironport1.chron.comhttp://130.80.29.15 refused to talk to me: 554 ironport1.chron.com)
Aug 8 10:11:57 servername postfix/smtp13748: 2C26E8979B3: to=<[email protected]>, relay=mx-nj-2.pobox.comhttp://208.210.124.72, delay=39263, status=deferred (host mx-nj-2.pobox.comhttp://208.210.124.72 said: 450 <[email protected]>: Sender address rejected: Domain not found (in reply to RCPT TO command))
Aug 8 10:11:57 servername postfix/smtp13748: 2BC7D8C61AC: to=<[email protected]>, relay=mail.cyberscope.nethttp://64.95.223.22, delay=13796, status=deferred (host mail.cyberscope.nethttp://64.95.223.22 said: 451 unable to accept non-FQDN HELO (#4.3.0) (in reply to MAIL FROM command))
Aug 8 10:11:57 servername postfix/smtp13748: connect to cluster9.us.messagelabs.comhttp://216.82.253.115: Connection refused (port 25)
Aug 8 10:11:57 servername postfix/smtp13748: connect to cluster9.us.messagelabs.comhttp://216.82.250.99: Connection refused (port 25)
Aug 8 10:11:57 servername postfix/smtp13748: connect to cluster9.us.messagelabs.comhttp://216.82.250.115: Connection refused (port 25)
We set up VirusBarrier and scanned the server. This is a copy of our console.log:
Mac OS X Version 10.4.9 (Build 8P135)
2007-08-08 10:20:50 -0500
2007-08-08 10:20:55.538 SystemUIServer486 lang is:en
Aug 8 10:22:39 servername authexec: executing /Library/Intego/netupdated.bundle/Contents/Resources/NetUpdate Installer.app/Contents/MacOS/NetUpdate Installer
Aug 8 10:49:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
Aug 8 10:49:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/kupdateb
virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/src/mech
virus OSX.PsyBot.232 found in file: /Volumes/Startup OS X/private/var/tmp/psybnc/psybnc
Aug 8 11:19:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
Aug 8 11:19:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/kupdateb
virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/src/mech
<CFURL 0x62bd440 0xa07bc150>{type = 15, string = file://localhost/Library/Contextual%20Menu%20Items/PortfolioCM.plugin/, base = (null)}
Finder tool: request to change uid to 501 gid to -1 for /private/tmp/vbx4smail_6v97Qz
virus Resource structure error found in file: /Volumes/Image Backup Drive/Old Labs Images/345 iMacs/Macintosh HD/System Folder/Help/HP LaserJet Printer Help/Help/Graphics/printer_word.JPG
Aug 8 11:49:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
Aug 8 11:49:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/animations/flahsbathtub/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/animations/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/contact/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/illustrations/photomontage/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/illustrations/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/images/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/greennotes/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/madisonframes/ARTWORK/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/makingcrepes/crepesjpeg/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/WS_FTP.LOG
virus Resource structure error found in file: /Volumes/Image Backup Drive/.Trashes/501/printer_word.JPG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-37.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-41.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-45.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-01.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-15.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-22.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/greennotes/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/madisonframes/ARTWORK/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/makingcrepes/crepesjpeg/WS_FTP.LOG
Aug 8 12:19:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
Aug 8 12:19:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
<CFURL 0x5004b0 0xa07bc150>{type = 15, string = file://localhost/Library/Contextual%20Menu%20Items/PortfolioCM.plugin/, base = (null)}
<CFURL 0x3a5c30 0xa07bc150>{type = 15, string = file://localhost/Library/Contextual%20Menu%20Items/PortfolioCM.plugin/, base = (null)}
Aug 8 12:26:21 servername ARDAgent 320: no multicast
virus Resource structure error found in file: /Volumes/Image Backup Drive/.Trashes/501/printer_word.JPG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-37.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-41.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-45.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-01.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-15.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-22.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/greennotes/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/madisonframes/ARTWORK/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/makingcrepes/crepesjpeg/WS_FTP.LOG
Aug 8 12:29:49 servername cyrus-quota1693: DBERROR: reading /var/imap/db/skipstamp, assuming the worst: No such file or directory
at which point we rebooted.
So we have changed all are passwords, are reimaging everything and had the sysadmin block all outgoing messages on port 25. In addition we have sent copies of the logs to Intego.
That all happened Wednesday. Unfortunately this mornings system log had:
Aug 10 02:58:45 servername VirusBarrierServer[461]: File infected: /private/var/tmp/.blan/.bot/rom by OSX.Botch.302
Aug 10 02:59:08 servername VirusBarrierServer[461]: File infected: /private/var/tmp/.ou/.bot/ru by OSX.Botch.302
Aug 10 02:59:28 servername VirusBarrierServer[461]: File infected: /private/var/tmp/.tmp/ /.bot/darwin by OSX.Botch.302
Aug 10 02:59:49 servername VirusBarrierServer[461]: File infected: /private/var/tmp/.tmp/.bot/crond by OSX.Botch.302
I know that this is an incredibly vague question but what would you suggest I do now?
Is there a way to find out where these "virus'" came from?
It is not impossible they were put on by a student as we recently found out that a number of the help desk students had the Mac admin password. I've looked at the install logs and the only things I see are the Apple software updates and apps we installed ourselves.
I realize that no mac virus' or worms have been found in the wild so it is unclear what VirusBarrier is reporting but it seems that ummm "something" is hiding somewhere and "infecting" these files and I'd like to get rid of it.
thanks for your time and help )
lex
Message was edited by: LexaniGWhat appears to be happening is that something is installing the IRC bot EnergyMech in hidden files on our server.
Aug 10 02:59:28 servername VirusBarrierServer461: File infected: /private/var/tmp/.tmp/ /.bot/darwin by OSX.Botch.302
When I checked the contents of the .tmp file with ls -Rla I found:
.tmp/ :
otal 1320
drwxr-xr-x 4 image wheel 136 Jun 24 19:44 .
drwxr-xr-x 5 image wheel 170 Jun 24 19:44 ..
drwx------ 16 image wheel 544 Jun 24 20:00 .bot
-rw-r--r-- 1 image wheel 675159 Jun 24 19:44 sclavi.tar
.tmp/ /.bot:
total 2144
drwx------ 16 image wheel 544 Jun 24 20:00 .
drwxr-xr-x 4 image wheel 136 Jun 24 19:44 ..
-rw-r--r-- 1 image wheel 351 Jun 28 10:00 1
-rw-r--r-- 1 image wheel 351 Jun 28 10:00 2
-rw-r--r-- 1 image wheel 351 Jun 28 07:00 3
-rwx------ 1 image wheel 412095 Jul 8 2005 bash
-rwxr-xr-x 1 image wheel 0 Aug 10 02:59 darwin
-rw-r--r-- 1 image wheel 354306 Oct 19 2005 freebsd
-rw------- 1 image wheel 22465 Jun 13 2001 mech.help
-rw-r--r-- 1 image wheel 1015 Jun 28 10:00 mech.levels
-rw------- 1 image wheel 6 Jun 24 19:44 mech.pid
-rw-r--r-- 1 image wheel 1457 Jun 28 10:00 mech.session
-rw-r--r-- 1 image wheel 5365 May 4 11:34 mech.set
-rwxr-xr-x 1 image wheel 178908 Sep 20 2005 pico
-rw-r--r-- 1 image wheel 87673 Jun 27 2006 pico.tgz
drwx------ 10 image wheel 340 May 27 2004 randfiles
After chmoding the files so that they were non-excecutable mech.set contained this:
# Zei`s EnergyMech configuration file
# v2.9.3 - CristofoR
##### Linking #####
#ENTITY emech
#LINKPASS abc123
#LINKPORT 49152
#LINK hismech a1b2c3 mech.host.net 49152
#LINK hermech abcdefg 0 0
AUTOLINK
##### Server List ####
SERVER LosAngeles.CA.US.Undernet.org 6665
SERVER LosAngeles.CA.US.Undernet.org 6668
SERVER LosAngeles.CA.US.Undernet.org 7000
Unfortunately as a student I theoretically don't have access to the server again until Monday... But I'll go in tomorrow and try and find someone to turn it off. heh (I suppose one way to find out who's on call is to shut it down and see who shows up...) In any case I'll try and delete any of these files I can find.
My boss is out of town and I'm over my head here so any and all suggestions will be gratefully received.
thanks
lex
Message was edited by: LexaniG
Message was edited by: LexaniG -
How can I stop what appears to be a virus in my e-mail sending out e-mails
Hi,
I keep getting undeliverable messages from my service provider. It seems I have some virus that keeps sending out some spam about winning money. It is going out to addresses I do not have in my address book or have ever dealt with. I'm not sure what to do or what software I can use to make these stop. Any help would be appreciated.My machine sends them immediately with a prefix in the Subject line saying <RE: hi > then the original email title.
And you have verified that they are indeed being sent by your computer based on an analysis of tcpdump logs or Wireshark logs running on another "believed clean"computer on the same LAN? I would strongly encourage you to submit excerpts of these logs to the likes of Intego, MacScan, etc., if so. You haven't downloaded any freeware from sites of unverifiable integrity, right? Is your DNS settings directing you to the DNS servers that you think they are (perhaps rerouting your sent mail to a rogue smtp server)? In Terminal, type scutil⏎ then type show State:/Network/Global/DNS⏎ and make sure you recognize the IP addresses of the reported DNS servers. (type exit⏎ to exit scutil)
Spammers in Africa can't send their results immediately. Looking at the long headers of a spam returned to me, it's got the same routing info as me and was sent at the same time.
Why not? I doubt that there is some guy sitting there manually doing this with email messages, it is automated, and would probably take milliseconds to duplicate your email, append the canned spam message, and shotgun it back out onto the internet. I live in Colorado and I picked a random server in New Zealand and pinged it (don't trust even pinging anything in some locales). The results?
myOldMac:~ jv$ ping {hidden}.org.nz
PING {hidden}.org.nz (202.6.116.6): 56 data bytes
64 bytes from NNN.NNN.NNN.NNN: icmp_seq=0 ttl=52 time=168.514 ms
64 bytes from NNN.NNN.NNN.NNN: icmp_seq=1 ttl=52 time=167.807 ms
64 bytes from NNN.NNN.NNN.NNN: icmp_seq=2 ttl=52 time=167.624 ms
64 bytes from NNN.NNN.NNN.NNN: icmp_seq=3 ttl=52 time=167.954 ms
--- {hidden}.org.nz ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max/stddev = 167.624/167.975/168.514/0.333 ms
That's only one-sixth of one second ... that's pretty fast. -
How to configure ML Server to send Alert Notifications by mail?
Is it possible to configure Mountain Lion Server to send out Alert notification by e-mail without enabling full Mail services?
I don't want to run the Mail service on the Server. I'm quite happy with my ISP's mail service. Besides, I have a dynamic public IP address, hence no rDNS entry (so I couldn't run Mail if I wanted to). And I don't have the expertise to configure and maintain the Mail service. But I would like to get the Server to send me any important alert notifications by e-mail.
I have access to an authenticated SMTP server I can use to relay the outbound alert notification emails. But I don't know how to coerce the alert service into using it. Is it possible to do so, or does one need the full-blown Mail service to be configured (with both dovecot and postfix running) in order to get Alerts to be e-mailed?
Thanks for any help.@MrHoffman,
Thanks for the pointers and suggestions.
The config for my ISP's SMTP server is correct. I specified the port (:465), and double-checked userid/password. It's the same as used by all our e-mail clients (a half-dozen or so on various Macs, iPhones, iPads, Linux boxes), all of which work fine from my LAN.
As for DNS, it seems OK. (I am indebted to you for the excellent series of articles on servers and networking at http://labs.hoffmanlabs.com/node/1705 )
The changeip command reports:
The names match. There is nothing to change.
dirserv:success = "success"
However, I should point out that I do not have the DNS service enabled on ML Server. I already have a local DNS running on my gateway router. (it's an instance of the dnsmasq process that is part of Tomato firmware). It has local names defined for all the servers and hosts on my LAN, and provides rDNS for them as well.
However, what I haven't done is enabled the Mail service. You've (slightly) misunderstood the core of my plan. My intent is not simply to secure the local mail server against remote access. I don't want either remote or local users from accessing the mail server. I don't want it listening for POP or IMAP connections from anywhere (on my LAN or remotely). I don't want it receiving inbound mail from anywhere. I don't want it relaying outbound mail for any client on my LAN. All I want the ML Server to be able to do is to send me alerts (by e-mail) when it's in need of attention. Other appliances on my LAN (eg. a NetgearReadyNAS) can send me e-mails when they are unhappy, and I hope I can coerce the ML Server to do the same.
I know I don't have the expertise to operate and maintain my own mail server, and I'm quite happy with the mail service provided by my existing network service provider. Plus, I'm behind a cable modem with a dynamic IP address, so I'm unable to establish my own rDNS record (which I understand is required to handle inbound mail).
It looks like the next step is to turn on the Mail service. But I'm sure it's going to be unhappy since there's no MX record set-up. I was hoping there was a way that ML Server could simply send out its own outbound alerts (using my ISP's SMTP relay) without having the incoming part of the mail service active. But perhaps Apple didn't anticipate that sort of configuration. -
Gmail mail account compromised..how do I change my sending out photos in my iPhoto account
I had my gmail account compromised and managed to get a new e-mail address for gmail. Now I was trying to send off some photos in my iPhoto program and what comes up is my original gmail address.......how do I change my e-mail (gmail) address and be able to send out some photos? Help
Go into iPhoto's Accounts preference pane and delete the email account that's there. Add it back with the new Gmail info.
OT -
Can ACE send out email alerts for failed probes?
hi guys:
Can ACE send out email alerts to users if the probes failed?
if no, is there any plan to put in this function in the future release?
thanks a lot
i know the work around is to set up the sys-log and configure the sys-log server to send out the mail.If there are no email alerts when a real server fails the probe and gets put out of rotation, how else will one know that the server is out of rotation.
Is this feature in the GUI ANM software?
John... -
SharePoint Foundation 2013 installed on Windows Server 2012 not sending out email notification
I have a server where i installed SP Foundation 2013 on top of Windows Server 2012. I have configured the SMTP as well as the outgoing SMTP in Central Administration
of SharePoint. When i create an alert on a document library, its did not sent any email notification on the changes made to the document in the document library. So, i created a workflow to send out email using SPD2013. The workflow run, but it cannot sent
out email with error saying that outgoing email is not configured correctly. I have checked with another server which i installed SP foundation 2013 on top of Windows Server 2008 R2 - its sending out email just fine using same configuration and outgoing SMTP.
I need help to resolve this issue or at least the cause of the problem.
Any help is greatly appreciated.
Try below:
http://social.technet.microsoft.com/wiki/contents/articles/13771.troubleshooting-steps-for-sharepoint-alert-email-does-not-go-out.aspx
Go to Central Admin ---->Operations----->outgoing email settings and verify that SMTP server is mentioned correctly
2) Test the connectivity with the SMTP server.
In order to do that follow these steps:
Open cmd
telnet <SMTP server name> 25 ( We connect smtp server to the port 25)
you should see a response like this 220 <servername> Microsoft ESMTP MAIL Service, Version: 6.0.3790.3959 ready at date and time
Beware that different servers will come up with different settings but you will get something
If you dont get anything then there could be 2 possible reasons, either port 25 is blocked or
the smtp server is not responding.
For testing response from your server
For testing response say ehlo to it.
Type :
ehlo <servername>
output:
250 <servername> Hello [IP Address]
Now a test mail can be sent from that SharePoint server.
Now we need to enter the From address of the mail.
Type :
mail from: [email protected]
output:
250 2.1.0 [email protected]….Sender OK
It's time to enter the recepient email address.
Type : rcpt to: [email protected]
output:
250 2.1.5 [email protected]
Now we are left with the data of the email. i.e. subject and body.
Type : data
output:
354 Start mail input; end with <CRLF>.<CRLF>
Type:
subject: this is a test mail
Hi
This is test mail body
I am testing SMTP server.
Hit Enter, then . and then Enter.
output:
250 2.6.0 <<servername>C8wSA00000006@<servername>> Queued mail for delivery
Type: quit
output:
221 2.0.0 <servername> Service closing transmission channe
3) Check alerts are enabled for your web application
verify if the windows timer service is running or not.
Run this stsadm command to check that
Stsadm.exe -o getproperty -url http://SharePoint-web-App-URL -pn alerts-enabled
This should return <Property Exist="Yes" Value="yes" />
If you don’t get this, Enable alerts by:
stsadm.exe -o setproperty -pn alerts-enabled -pv "true" -url http://SharePoint-web-App-URL
If its already enabled, try turn off and turn on it back.
4) Check the Timer job and Properties
Go to
MOSS 2007: Central Administration > Operations > Timer Job Definitions (under Global Configuration)
In SharePoint 2010: Central Administration > Monitoring > Review Job Definitions
Check whether the "Immediate Alerts" job is enabled for your web application. check these properties:
job-immediate-alerts
job-daily-alerts
job-weekly-alerts
stsadm.exe -o getproperty -url "http://Your-SharePoint-web-App-URL" -pn job-immediate-alerts
The expected output is:
<Property Exist="Yes" Value="every 5 minutes between 0 and 59"/>.
If you don’t get this, run the following command to set its value.
stsadm.exe -o setproperty -pn job-immediate-alerts -pv “every 5 minutes between 0 and 59" -url http://Your-SharePoint-web-App-URL
5) Check whether the account is subscribed for alerts and it has a valid email account. This should be the first thing to check if the problem persists for some users not for all.
6) Then check if at all those users have at least read permission for the list. Because the first mail should go out for every user without security validation but the next ones won't be delivered unless the user has at least read
permission.
7) If it is happening for one user, can also try to delete and re add the user in the site.
8) Most importantly , you should try this one.
Run this SQL query to the content db < Select * from Timerlock>
This will give you the name of the server which is locking the content database and since when.
In order to get rid of that lock
Go to that server which is locking the content db and then restart the windows timer service.
within some time it should release the lock from content db, if not then at the most stop the timer job for some time
Once the lock will be released then try to send some alerts
You will surely get the email alert.
I found this is the most probable reason for alert not working most of the time. We should start troubleshooting with above steps before coming to this step for any alert email issue but from step 1 to step 7 are best for new environments or new servers.
If the issue is like this ,alert was working before and suddenly stopped working without any environmental change then above conditions in step 1-7 should be ideally fine.
Even after this if it is not working, then you can try these few more steps too
9) Try re-registering the alert template:
stsadm -o updatealerttemplates -url http://Your-SharePoint-Web-App-URL -f "c:\Program Files\Common Files\Microsoft Shared\web server extensions\12\TEMPLATE\XML\alerttemplates.xml" -LCID 1033
10) Try to clear the configuration cache
If this helped you resolve your issue, please mark it Answered -
I have an Ipad 2 and are having problems sending out emails in one of my email address. This is a POP3 email Account? I always get a message reading that the email was not sent because the server does not allow relaying. I have no such problem with gmail. What could be the problem and how do I resolve this. Is it about settings?
Richard.Welcome to the Apple community.
If you are unable to remember your password, security questions, don’t have access to your rescue address or are unable to reset your password for whatever reason, your only option is to contact Apple ID Support, upon speaking to an operator you should explain that your problem is related to your Apple ID, this way you will not be charged for assistance, even if you don’t have an AppleCare plan.
The operator will take you through some steps you may have already tried, however they need to be sure they have exhausted all usual approaches before trying to reset your account, so you should try to be helpful and show patience with the procedure.
The operator will need to verify they are speaking to the account holder and may ask you some questions that only the account holder could know, and you will need to answer them if the process is to proceed.
Once the operator has verified your identity they will send a message through to your device which contains an alpha numeric code, which you will need to read back to them.
Once this has been completed they will send an email to your iCloud email address after a period of 24 hours, so you should check that mail is enabled in your devices iCloud settings.
Upon receipt of the email, use the reset link provided to reset your password, after which you should be able to make the adjustments to iCloud that you wish to do. -
A proposal - moving some things out of mx.rpc into mx.async?
Hey guys,
Just want to get your thoughts rather than jump in and filing a feature request. What do you think about moving a few things that aren't necessarily RPC out of mx.rpc and into a new package (for example mx.async) and removing some of the service-related assumptions? A couple of candidates for this in my mind would be:
AsyncToken - I use this for all sorts of Async stuff, which is usually waiting on a service, but not always.
IResponder - This is useful for things such as command chains, and listening in to user actions, and the like. I would also like to see IResponder.applyFault() and IResponder.applyResult() be taken out of mx_internal (and their parameters changed from event types to something else, perhaps Object for result, and Fault for fault).
And the various impls of IResponder as well :)
Just an idea that's been bouncing around my head, thought I'd throw it out there and see what you guys think - worth filing a feature request?
-Josh
"Therefore, send not to know For whom the bell tolls. It tolls for thee."
http://flex.joshmcdonald.info/
:: Josh 'G-Funk' McDonald
:: 0437 221 380 ::
[email protected]Nice, well while you're in there, any chance we can get FaultEvent from send() dispatching on next frame like a normal event (and on the AsyncToken as well as the WebServie)? I've got some *ugly* workaround code because the fault is dispatched (and handlers invoked) before send() returns, and you can't listen to invocation faults on the AsyncToken like normal events:
//This code is to catch invocation problems, since Flash has decided to interrupt the flow of the VM for
//FaultEvent rather than dispatch it on next frame from the token
operation.addEventListener(FaultEvent.FAULT, invocationFaultHandler);
//Send the request
log.debug("Sending request...");
token = operation.send();
log.debug("...Send attempt completed");
//Remove our invocation fault listener
operation.removeEventListener(FaultEvent.FAULT, invocationFaultHandler);
//Do we need to send this info on to the token's listeners in a frame or two?
if (invocationFaultEvent) //Instance-level global
log.debug("There was an invoke error, which means the token listeners aren't notified. Will redispatch to them in 250ms");
//When we create the timer, we're using a hard listener reference because this helper instance may otherwise be collected before we're done!
//So make sure to remove the handler (and kill the timer) on firing!
timer = new Timer(250, 1);
timer.addEventListener(TimerEvent.TIMER, reDispatchInvocationFault);
timer.start();
return token;
Cheers,
-Josh
On Wed, Oct 1, 2008 at 10:49 AM, Matt Chotin
<
[email protected]> wrote:
A new message was posted by Matt Chotin in
Developers --
A proposal - moving some things out of mx.rpc into mx.async?
I'm not sure the changes are in Iresponder as much as in a new impl class, but we're looking at making the service classes accept an Iresponder as the last arg to send(...) (where we'd look at the last arg and if it's a responder pull it off). This can make some of the declarative stuff that we're looking at a little easier. So any APIs we do would just be to assist in the wiring up of all this stuff.
Not sure when we'll have a writeup for it, a lot of it is do to features in the IDE and we're not sharing those yet :-) But I'm hoping that I can get that team to provide a writeup in a few days. Admittedly, the changes we're making are for RPC, not for independence from it, so we'd have to see if it makes sense to do both.
Matt
On 9/30/08 5:38 PM, "Josh McDonald" <
[email protected]> wrote:
A new message was posted by Josh McDonald in
Developers --
A proposal - moving some things out of mx.rpc into mx.async?
Don't really care about the package name thing, mainly just about changing some of the things that make them less useful when you not actually using mx.rpc.*
What can you tell us about the changes to IResponder coming in Gumbo? I know the UM extensions to Cairngorm use it for callbacks on generated events. I use it for the same purpose, and also as part of an implemtation of command chains, where each invocation takes a context and an IResponder, and it's up to the impl to call Result or Fault.
-Josh
On Wed, Oct 1, 2008 at 4:27 AM, Matt Chotin <
[email protected]> wrote:
A new message was posted by Matt Chotin in
Developers --
A proposal - moving some things out of mx.rpc into mx.async?
So it probably would have been better if we had created mx.async or used utils for these before, but I don't know that repackaging is a great idea at this point since it will make migrating code forward harder.
The applyFault/Result stuff may be reasonable, we're actually looking at some work in Iresponder as part of Flex 4 (more of another impl that we'll provide) so we can see as we do it. Do other people use these classes and want these kinds of adjustments?
Matt
On 9/29/08 7:23 PM, "Josh McDonald" <
[email protected]> wrote:
A new discussion was started by Josh McDonald in
Developers --
A proposal - moving some things out of mx.rpc into mx.async?
Hey guys,
Just want to get your thoughts rather than jump in and filing a feature request. What do you think about moving a few things that aren't necessarily RPC out of mx.rpc and into a new package (for example mx.async) and removing some of the service-related assumptions? A couple of candidates for this in my mind would be:
* AsyncToken - I use this for all sorts of Async stuff, which is usually waiting on a service, but not always.
* IResponder - This is useful for things such as command chains, and listening in to user actions, and the like. I would also like to see IResponder.applyFault() and IResponder.applyResult() be taken out of mx_internal (and their parameters changed from event types to something else, perhaps Object for result, and Fault for fault).
* And the various impls of IResponder as well :)
Just an idea that's been bouncing around my head, thought I'd throw it out there and see what you guys think - worth filing a feature request?
-Josh
View/reply at <
http://www.adobeforums.com/webx?13@@.59b69e6f/0>
Replies by email are OK.
Use the unsubscribe form at <
http://www.adobeforums.com/webx?280@@.59b69e6f!folder=.3c060fa3 <
http://www.adobeforums.com/webx?280@@.59b69e6f%21folder=.3c060fa3> > to cancel your email subscription.
View/reply at <
http://www.adobeforums.com/webx?13@@.59b69e6f/2>
Replies by email are OK.
Use the unsubscribe form at <
http://www.adobeforums.com/webx?280@@.59b69e6f!folder=.3c060fa3> to cancel your email subscription.
"Therefore, send not to know For whom the bell tolls. It tolls for thee."
http://flex.joshmcdonald.info/
:: Josh 'G-Funk' McDonald
:: 0437 221 380 ::
[email protected] -
TS2446 I forgot my security questions how do I buy some thing on iTunes with out them?
I forgot my security questions how do I buy some thing on iTunes with out them?
See my User Tip for some help: Some Solutions for Resetting Forgotten Security Questions: Apple Support Communities.
Send Apple an email request for help at: Apple - Support - iTunes Store - Contact Us
Call Apple Support in your country: Customer Service: Contacting Apple for support and service -
I have what I think is the original Ipad, and suddenly it will no longer send out emails and some of the apps that worked prior to the newer Ipads coming out will no longer work. Can this be updated, or am I stuck with an expensive electronic device that will no longer serve my needs?
Did you already update to the latest iOS; http://support.apple.com/kb/HT4623
-
TS3276 I cannot get my outgoing SMTP server togo "On-Line" and cannot send out emails.
I cannot get my outgoing SMTP server togo "On-Line" and cannot send out emails.
I had this problem too but I fixed it today.
Go to the mail menu preferences.
Click on account in question.
Select the outgoing SMTP mail server (the one offline), this has a drop down list, click on the edit server list.
Click on the advanced button.
Make sure use default port is checked.
Make sure SSL is unchecked (unless your provider requires it, mine does not work with it checked).
Have authentication set to password.
User name should be your email address for that account.
Make sure correct password is entered (for some strange reason my password box was blank on this account).
Push the ok button.
For me the SSL box was checked and the password was missing. This is strange to me considering I have unchecked the SSL Box on the mail preference advance page. Also, I went through the complete set up account when I first created the account, why was my outgoing server password box empty?
I hope this helps.
Here is a link to some visual aids with the steps from my ISP
http://support.knology.net/content/smtpauth/smtpredirect.cfm
Maybe you are looking for
-
Read only access for a Database!
Hi All, I need to create a user for my database who can have readonly access to the database and can work as *"Read Only Apps".* Senario:-* I want to give access to development team through TOAD/ SQL* but that user can not delete/update any thing fro
-
Multiple instances of identical vi inside a while loop
We have a while loop that is monitoring 6 sensors in a heated water bath. Each sensor has the same basic switching parameters. While the loop runs, it does not tie the shift register value to the same instance every time it runs. The 6 instances of t
-
I'm having problems with plug-ins in Safari 4.0.5 (6531.22.7). Within the past two days, Flash, and today, Java applets will not work in Safari. I get the following error messages: "The page "The New York Times - Breaking News, World News & Multimedi
-
I recently attempted to upload the latest FLASH PLAYER. My older Mac (G4) works wonderfully as a desktop computer, so I NEED a flash player badly, but now it says that Adobe no longer supports older Mac Power PCs! What's up with that?? Some of the be
-
my code throws error: Msg 8114, Level 16, State 5, Line 1 Error converting data type varchar to float. Code: ALTER FUNCTION [dbo].[GetPayDeducted] @emplID int, @month VARCHAR(50) = NULL RETURNS int AS BEGIN Declare @StartDate Date, @EndDate Date, @my