Smtp log entry, bounces, or does the mail server send bounce backscatter?

Today, I received two bounces from mail I did not send, and they reference a subdomain of a virtual domain on my machine that doesn't exist...
server is set up with domain: server.domain.com
web and mail services are available for virtual domain: service.com
So, I got what I at first thought were phishing bounces, but then when I looked in my mail logs today, I found my first ever SMTP log entries:
Feb 16 07:33:42 server.domain.com postfix/smtpd[----]: warning: hostname #.#.#.#.reverse.someone.net does not resolve to address #.#.#.#: nodename nor servname provided, or not known
I have four of those at various times this morning.
I've checked the mail logs and seen that there are connection attempts, particularly people trying plain text. I have used mxtoolbox and a few other relay checkers to be sure there is not an open smtp relay. none.
I have one site on the service.com and it has its own malware checking (wordpress install). It reports that it is clean and feeling good.
The default sites are unaccessible without http authentication.
Do those SMTP log entires mean someone has gained access? or was my server trying to process backscatter spam? I'm lost on how this could happen.

What do the bounce messages say? Was the mail rejected by a remote server? If so, which one? What are some of the other log entries in the mail log? Does MX Toolbox say your email server is or is not an open relay? Are the IP addresses in your log post an internal or external address? Someone might be using your domain to send spam email but they may not be using your email server and when the messages bounce they get returned to your server.

Similar Messages

Does the local server send the query to remote server?

I have 2 servers,a local server connect with remote server through database link.If I execute a query at local server but only access tables in remote server,does local server send this query to remote server or all the tables at remote server will send to local server?If local server send this query to remote server,does it can execute another query while it waits the result send from remote server?
Any help would be appreciated
Regards

Yes is executed on remote , and the remote can accept queries as normal see my example below
SQL> select * from v$database@prod_p;
Execution Plan
Plan hash value: 3039639316
| Id | Operation | Name | Rows | Bytes | Cost (%CPU)| Time
| Inst |
| 0 | SELECT STATEMENT REMOTE| | 100 | 64400 | 0 (0)| 00:00:0
1 | |
| 1 | MERGE JOIN CARTESIAN | | 100 | 64400 | 0 (0)| 00:00:0
1 | |
|* 2 | FIXED TABLE FULL | X$KCCDI | 1 | 582 | 0 (0)| 00:00:0
1 | RPRD |
| 3 | BUFFER SORT | | 100 | 6200 | 0 (0)| 00:00:0
1 | |
| 4 | FIXED TABLE FULL | X$KCCDI2 | 100 | 6200 | 0 (0)| 00:00:0
1 | RPRD |
Predicate Information (identified by operation id):
2 - filter("DI"."INST_ID"=USERENV('INSTANCE'))
Note
- fully remote statement

I am trying to create another email account with talk talk. and I keep getting a failed message saying 'mail could not log into the mail server talk talk. Yet I already have another email account with talk talk. Not sure what I am doing wrong

I am trying to create another email account with Talktalk. I already have one account.
I try to input the new email address and password and get a failed message
'Mail could not lot into the mail server talktalk.net.
I have tried several times and keep getting the same message.
Any ideas

Accessing your emails from any computer connected to the Internet or from a Smart phone should be straightforward.
For help on how to set up your e-mail on some of the most common software applications and devices, see How do I set up my TalkTalk email?
If your software application or device isn't listed, all you need to connect to your TalkTalk e-mail mailbox are the TalkTalk e-mail settings. Make sure you use the right email settings for your specific email address.
TalkTalk email addresses only
Login / Username
[email protected]
[email protected]
Incoming mail server
mail.talktalk.net
mail.talktalk.net
Incoming Port
110
143
Outgoing mail server
smtp.talktalk.net
smtp.talktalk.net
Outgoing Port
587
587
Outgoing SSL
Yes
Yes
Outgoing Authentication
Yes
Yes

The mail could not be sent to the recipients because of the mail server failure. (Sending Mail using Account 1 (2013-04-30T16:36:52). Exception Message: Cannot send mails to mail server. (Mailbox unavailable. The server response was: 5.7.1 Client does not

Interesting db mail issue. If i click send test mail from sql mgmt studio, it works fine, but when i execute a SP to send a mail, it fails. One thing I noticed is that the "LastModified" column in the mail log shows the domain account when a test
mail was sent from mgmt studio, but show "sa" when the SP was used to send mail.
This is from SQL 2012, did not see this in sql 2008, looks like 2008 always used the service account. any ideas ?
Get this error:
The mail could not be sent to the recipients because of the mail server failure. (Sending Mail using Account 1 (2013-04-30T16:36:52). Exception Message: Cannot send mails to mail server. (Mailbox unavailable. The server response was: 5.7.1 Client does not
Thanks.
Ranga

Hi Ranga,
I also use SQL Server 2012. I send a test email through SQL Server Management and the last modified By “sa”.
If you used stored procedure to send a test email. Please use the command below:
EXEC msdb.dbo.sp_send_dbmail
@profile_name = 'Adventure Works Administrator',
@recipients = '[email protected]',
@body = 'The stored procedure finished successfully.',
@subject = 'Automated Success Message' ;
I can both send test email through SQL Server Management Studio and SP. Make sure you have the right profile. Since you could send test mail via SQL Server Management Studio, please try again to send it via SP.
Thanks.
If you have any feedback on our support, please click
here.
Maggie Luo
TechNet Community Support

HT4864 I am getting a triangle with an exclamation point next to my inbox...it says: There may be a problem with the mail server or network. Verify the settings for account "MobileMe" or try again. The server returned the error: Mail was unable to log in

I can send but cannot recieve email
This is the messege I am gewtting:
There may be a problem with the mail server or network. Verify the settings for account “MobileMe” or try again.
The server returned the error: Mail was unable to log in to the IMAP server “p02-imap.mail.me.com” using “Password” authentication. Verify that your account settings are correct.
The server returned the error: Service temporarily unavailable

Also if I go to system preferences accounts and re-enter the password it fixes the glitch sometimes.

Why does the Mail.app CC: field puts me first on the CC: list although I was not ?

Why does the Mail.app CC: field always rearranges the list so I am first on the CC: list although the sender intentionally did not ?
I did not see how and where to de-activate this unnecessary intrusion in the company's communication codes.
iOS on my iphone, correctly leaves my name where it is in the CC: list.

Hi starbux48,
Yahoo! partnered with Apple to allow an IMAP style offering on the iPhone, free of charge for their users. However that feature is only available if you use the iPhone. If you want IMAP/POP access on computers then you'd need to upgrade to the Plus level account.

When I send a mail from my iPhone, it displays the mail server name to the receiver if the mail and does nog display my name or e mail address. This only since upgrading my iPhone5 to iOS7

When I send a mail from my iPhone, it displays the mail server name to the receiver if the mail and does not display my name or e mail address. This only since upgrading my iPhone5 to iOS7. I've checked all settings etc. anyone have a solution please?

Rectory wrote:
Please can someone tell me how I can change this so when I send a mail from my phone and from the IPad that it reads from me.
You need a separate email address but you've already ruled out that solution.

Why does the mail not work when i updated my 5s to iOs 8?

why does the mail not work when i updated my 5s to iOs 8?

Thank you for the reply. But can you tell me what this configuration is about and how I should do this?

Just trying out my new mac but email won't load, error says "The mail server denied access to the account because an administrator or other mail client was using it when Mail tried to log in. Try again later." A little lock is beside the email inbox

Just trying out my new mac but email won't load, error says "The mail server denied access to the account because an administrator or other mail client was using it when Mail tried to log in. Try again later." A little lock is beside the email inbox account, no password prompted and account is online and enabled... Thoughts?

Have you tried clicking on the lock to see it it will then ask for a passwored. Otherwise, try reblooting.

Single keyboard shortcut needed for doing the Mail PDF

I very frequently e-mail Word files (using Apple Mail) as PDFs. However, it takes two long steps (Print Command and pulldown to Mail PDF command). I want to have one single keyboard shortcut for doing the Mail PDF.workflow command from within Word and not have to use the mouse at all. Any ideas?

Maybe you can script it with AppleScript Editor (in Applications)? I'm no AppleScript guru, but since you did not get any other response, I thought I'd mention it.
Get to the point where you want to use your keyboard command. Hit Record in AppleScript editor. If those actions are scriptable (not everything is), they will show up in the window. Hit Stop when you are done. You should be able to save the script as an application.

What does this mean? The mail server responded: Too many messages. Please check the message and try again.

I use BT yahoo mail with Thunderbird 24.6.0 in the last few days i've started getting this message when sending messages:
An error occurred while sending mail. The mail server responded: Too many messages. Please check the message and try again.
Now sometimes the messages are sent anyway and sometimes not. If I re-send sometimes it works and sometimes not. I've contacted BT 'tech support' who tell me there is nothing wrong with them or their servers and as webmail works ok they won't help. I strongly suspect it IS a BT issue, Any clues to fix this?

The message means BT are lying basically. I have just spent the best part of an hour on chasing what limits BT place on mail sending... the internet contains a void.
The closest thing I can locate is a BT rep here https://community.bt.com/t5/Email/E-Mail-message-limit/m-p/1045228/highlight/true#M17523 refusing to identify what limits they impose but advising their switch to critical path has more stringent controls. AFAIK Critical path is ca mail software solution sold by OpenWave Messaging http://owmessaging.com/
So your paying for a totally undefined service. Congratulations!

"Unable to establish a connection between WebEx and the mail server."

Hi,
I installed Cisco WebEx and integrated with our Microsoft exchange server. It showed server "UP". everything's came up and working fine after that and sudenlly i found this message "Unable to establish a connection with the mail server. Please recheck settings."
I went into the Mail Server setup to edit settings and now, it shows Server Down. Do I need to do something on the MS Exchange 2010 or from webex server ??
Any help is greatly appreciated. Thanks a lot!

Every 180 seconds, CWMS verifies the connection to the SMTP server by establishing a connection on TCP port 25 (SMTP) and then sending the EHLO command followed by the QUIT command. This check is also performed once when logging into the admin web page or when browsing to System -> Servers (where the status of the mail server is displayed).
If this sequence does not complete successfully, the warning “Unable to establish a connection with the mail server. Please recheck settings.” will show in a banner at the top of the CWMS admin pages.
You can verify the connection to the SMTP server manually by using “telnet 25”.
If you have access to the CWMS unix shell be aware that CWMS does not come with the telnet command installed.
As an alternative, you can use this 3-lines script:
exec 3<>/dev/tcp/x.x.x.x/25
echo -e "EHLO\r\nQUIT\r\n " >&3
cat <&3
Replace x.x.x.x by the ip address or hostname of the SMTP server and save the script in a file, f.e.:
/* script saved in a file named ehlo */
[root@dchriste-cwms-adm1 ~]# cat ./ehlo
exec 3<>/dev/tcp/10.48.54.79/25
echo -e "EHLO\r\nQUIT\r\n " >&3
cat <&3
Then, execute it:
[root@dchriste-cwms-adm1 ~]# sh ./ehlo
The output should be similar to this:
220 *******************************************************************************************************************
250-confukdc.confuk.com Hello [10.48.52.110]
250-TURN
250-SIZE
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250-XXXXXXXXXXXXXXXXXXXXXXXA
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50
250 OK221 2.0.0 confukdc.confuk.com Service closing transmission channel
Also, you can use this tcpdump command to see the conversation (replace x.x.x.x by the SMTP server’s IP address or hostname):
tcpdump -vXs 0 host x.x.x.x and tcp port 25
If you have HA, it is not certain which admin VM talks to the smtp server, so best to check both.
If you don't have access to the CWMS unix shell, best to span the switch ports and run packet capture.

An error occurred while sending mail. The mail server responded: Relaying not allowed.

Suddenly I am not able to send any email from my account, from pc or phone.
It gives error message "An error occurred while sending mail. The mail server responded: Relaying not allowed. Please check the message recipient --------and try again."
I have checked account setting and is correct. please help

This message, which comes from the server, usually means that you are using an smtp server provided for use with one particular account to send messages "from" other accounts. The fact that it also happens with your phone does indicate that it is external to Thunderbird.
How many different email accounts do you have? How many different providers are involved?

SSL Error when connecting to the mail server

Hi,
i started having a wiered SSL error for some of my users on the mail servers when they connect using their mac machines to the mail server telling its the wrong username and password, but the same username and password works from the hand held devices including ipads and iphones. I checked the syslog and the maillog which is showing no errors regarding this. Althou i started getting this error com.apple.launchd[1] (org.dovecot.fts.update): Throttling respawn: Will start in 10 second for the past 1 week. i am using 10.9.1 Maverics. I can provide all the logs of the server if needed.

Make sure you are using right security protocol, for IMAP you need to enable TLS/SSL. Go to email settings> Incoming mail > Security.
If a reply has solved your problem click Accept as solution button, doing it will help others know the solution. Thanks.

Where to configure the mail server of GRC access control 5.3?

We changes our SMTP server in SAP and we need to configure also the mail server in Virsa but i dont know how. Can someone help me how to change the SMTP server in VIRSA/SAP GRC.
Thank you and have a good day ahead.

Hi topnnehj,
In GRC 5.3 the log reports for firefighter access are sent from the back-end system. So, if you´re using the firefighter module, after a mail server change you have to set the parameters in tx. SCOT acordingly. Also you have to change in CUP if you´re using CUP workflow notifications via e-mail.
Regards,
Diego.

Smtp log entry, bounces, or does the mail server send bounce backscatter?

Similar Messages

Maybe you are looking for