Snow Leopard Server possibly sending out spam
Hi Everyone-
I have the option checked in Server Admin to send an account on my server a copy of all the undeliverable mail. This morning, I wake up and there's 400+ new emails from Mail Delivery Subsystem saying things like Mail timed out.
My server isn't setup as a relay and I require authentication, but it seems like I'm sending out spam email. The email is coming from [email protected], even though there's no account with that email address.
Here's a sample out of mail.log:
Apr 22 17:44:49 mail postfix/smtp[21153]: DA72E115D4C: to=<[email protected]>, relay=none, delay=34129, delays=34098/0.05/30/0, dsn=4.4.1, status=deferred (connect to lycos.com.my[216.8.179.23]:25: Operation timed out)
Any ideas?
Thanks!
Spam mail is still being sent. Web service is off. There is no user alias or user for "Paypal".
Here is a pretty long chunk of Mail.log:
Apr 23 10:14:04 mail postfix/smtp[5645]: connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out
Apr 23 10:14:04 mail postfix/smtp[5645]: 04D1411D814: to=<[email protected]>, relay=none, delay=11149, delays=11119/0.04/30/0, dsn=4.4.1, status=deferred (connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out)
Apr 23 10:14:04 mail postfix/smtp[5645]: 04D1411D814: to=<[email protected]>, relay=none, delay=11149, delays=11119/0.04/30/0, dsn=4.4.1, status=deferred (connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out)
Apr 23 10:16:57 mail postfix/smtpd[5710]: connect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:16:58 mail postfix/smtpd[5710]: lost connection after EHLO from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:16:58 mail postfix/smtpd[5710]: disconnect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:18:34 mail postfix/qmgr[123]: 1A95F11DCE5: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:18:34 mail postfix/qmgr[123]: 3607611DC9A: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:18:34 mail postfix/smtp[5738]: 3607611DC9A: host mx1.mail.eu.yahoo.com[77.238.177.9] refused to talk to me: 421 4.7.0 [TS01] Messages from 24.227.121.138 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
Apr 23 10:18:35 mail postfix/smtp[5738]: 3607611DC9A: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11052, delays=11051/0.04/0.62/0, dsn=4.7.0, status=deferred (host mx2.mail.eu.yahoo.com[77.238.184.241] refused to talk to me: 421 4.7.0 [TS01] Messages from 24.227.121.138 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html)
Apr 23 10:19:04 mail postfix/smtp[5733]: connect to eden.com[71.103.248.51]:25: Operation timed out
Apr 23 10:19:04 mail postfix/smtp[5733]: 1A95F11DCE5: to=<[email protected]>, relay=none, delay=11067, delays=11037/0.02/30/0, dsn=4.4.1, status=deferred (connect to eden.com[71.103.248.51]:25: Operation timed out)
Apr 23 10:19:04 mail postfix/smtp[5734]: connect to sonnyclean.teradyne.com[206.114.21.197]:25: Operation timed out
Apr 23 10:19:04 mail postfix/smtp[5736]: connect to hq.tcfarm.com[216.8.179.23]:25: Operation timed out
Apr 23 10:19:04 mail postfix/smtp[5736]: 3607611DC9A: to=<[email protected]>, relay=none, delay=11082, delays=11051/0.03/30/0, dsn=4.4.1, status=deferred (connect to hq.tcfarm.com[216.8.179.23]:25: Operation timed out)
Apr 23 10:19:34 mail postfix/smtp[5734]: connect to mrsclean.teradyne-agoura.com[206.114.21.196]:25: Operation timed out
Apr 23 10:20:04 mail postfix/smtp[5734]: connect to hazelclean.teradyne.com[198.51.251.107]:25: Operation timed out
Apr 23 10:20:18 mail postfix/anvil[5714]: statistics: max connection rate 1/60s for (submission:166.137.138.184) at Apr 23 10:16:57
Apr 23 10:20:18 mail postfix/anvil[5714]: statistics: max connection count 1 for (submission:166.137.138.184) at Apr 23 10:16:57
Apr 23 10:20:18 mail postfix/anvil[5714]: statistics: max cache size 1 at Apr 23 10:16:57
Apr 23 10:20:34 mail postfix/smtp[5734]: connect to mrclean.teradyne.com[198.51.251.105]:25: Operation timed out
Apr 23 10:20:34 mail postfix/smtp[5734]: 1A95F11DCE5: to=<[email protected]>, relay=none, delay=11157, delays=11037/0.03/120/0, dsn=4.4.1, status=deferred (connect to mrclean.teradyne.com[198.51.251.105]:25: Operation timed out)
Apr 23 10:27:23 mail postfix/smtpd[5887]: connect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:27:23 mail postfix/trivial-rewrite[5892]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:27:23 mail postfix/smtpd[5887]: F166111ECD4: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:27:27 mail postfix/smtpd[5887]: 60F8511ECD5: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:27:27 mail postfix/cleanup[5893]: 60F8511ECD5: message-id=<010401cae2f1$1b4ac0c0$51e04240$@com>
Apr 23 10:27:27 mail postfix/qmgr[123]: 60F8511ECD5: from=<[email protected]>, size=5783, nrcpt=2 (queue active)
Apr 23 10:27:27 mail postfix/smtpd[5887]: disconnect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:27:27 mail postfix/smtpd[5896]: connect from localhost[127.0.0.1]
Apr 23 10:27:27 mail postfix/trivial-rewrite[5892]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:27:27 mail postfix/smtpd[5896]: D06C211ECE6: client=localhost[127.0.0.1]
Apr 23 10:27:27 mail postfix/cleanup[5893]: D06C211ECE6: message-id=<010401cae2f1$1b4ac0c0$51e04240$@com>
Apr 23 10:27:27 mail postfix/smtpd[5896]: disconnect from localhost[127.0.0.1]
Apr 23 10:27:27 mail postfix/qmgr[123]: D06C211ECE6: from=<[email protected]>, size=6184, nrcpt=3 (queue active)
Apr 23 10:27:27 mail postfix/smtp[5894]: 60F8511ECD5: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.5, delays=0.1/0.01/0/0.39, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as D06C211ECE6)
Apr 23 10:27:27 mail postfix/smtp[5894]: 60F8511ECD5: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.5, delays=0.1/0.01/0/0.39, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as D06C211ECE6)
Apr 23 10:27:27 mail postfix/qmgr[123]: 60F8511ECD5: removed
Apr 23 10:27:27 mail postfix/pipe[5901]: D06C211ECE6: to=<[email protected]>, relay=dovecot, delay=0.07, delays=0.01/0.05/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:27:27 mail postfix/pipe[5903]: D06C211ECE6: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.09, delays=0.01/0.05/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:27:32 mail postfix/smtp[5899]: D06C211ECE6: to=<[email protected]>, relay=itbsg.com[72.34.46.140]:25, delay=4.2, delays=0.01/0.05/0.43/3.7, dsn=2.0.0, status=sent (250 OK id=1O5Jqt-0006Z8-NK)
Apr 23 10:27:32 mail postfix/qmgr[123]: D06C211ECE6: removed
Apr 23 10:28:20 mail postfix/smtpd[5887]: connect from elasmtp-kukur.atl.sa.earthlink.net[209.86.89.65]
Apr 23 10:28:20 mail postfix/trivial-rewrite[5920]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:28:20 mail postfix/smtpd[5887]: 75C4211ECF4: client=elasmtp-kukur.atl.sa.earthlink.net[209.86.89.65]
Apr 23 10:28:20 mail postfix/cleanup[5893]: 75C4211ECF4: message-id=<328F6752485D4E16BCD6E4090060D04B@jc2010>
Apr 23 10:28:20 mail postfix/qmgr[123]: 75C4211ECF4: from=<[email protected]>, size=4041, nrcpt=2 (queue active)
Apr 23 10:28:20 mail postfix/smtpd[5887]: disconnect from elasmtp-kukur.atl.sa.earthlink.net[209.86.89.65]
Apr 23 10:28:21 mail postfix/smtpd[5896]: connect from localhost[127.0.0.1]
Apr 23 10:28:21 mail postfix/smtpd[5896]: 16E9911ED01: client=localhost[127.0.0.1]
Apr 23 10:28:21 mail postfix/cleanup[5893]: 16E9911ED01: message-id=<328F6752485D4E16BCD6E4090060D04B@jc2010>
Apr 23 10:28:21 mail postfix/smtpd[5896]: disconnect from localhost[127.0.0.1]
Apr 23 10:28:21 mail postfix/qmgr[123]: 16E9911ED01: from=<[email protected]>, size=4651, nrcpt=3 (queue active)
Apr 23 10:28:21 mail postfix/smtp[5894]: 75C4211ECF4: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.83, delays=0.26/0/0/0.57, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-09, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 16E9911ED01)
Apr 23 10:28:21 mail postfix/smtp[5894]: 75C4211ECF4: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.83, delays=0.26/0/0/0.57, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-09, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 16E9911ED01)
Apr 23 10:28:21 mail postfix/qmgr[123]: 75C4211ECF4: removed
Apr 23 10:28:21 mail postfix/pipe[5901]: 16E9911ED01: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:28:21 mail postfix/pipe[5903]: 16E9911ED01: to=<[email protected]>, relay=dovecot, delay=0.04, delays=0.01/0/0/0.03, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:28:21 mail postfix/pipe[5901]: 16E9911ED01: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.04, delays=0.01/0.01/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:28:21 mail postfix/qmgr[123]: 16E9911ED01: removed
Apr 23 10:28:34 mail postfix/qmgr[123]: B27E811D8CA: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:28:34 mail postfix/smtp[5899]: connect to domcollect.mailrejector.com[188.40.178.59]:25: Connection refused
Apr 23 10:28:34 mail postfix/smtp[5899]: B27E811D8CA: to=<[email protected]>, relay=none, delay=11960, delays=11959/0.01/0.25/0, dsn=4.4.1, status=deferred (connect to domcollect.mailrejector.com[188.40.178.59]:25: Connection refused)
Apr 23 10:28:34 mail postfix/smtp[5933]: connect to lycos.co.uk[209.202.254.14]:25: Connection refused
Apr 23 10:28:34 mail postfix/smtp[5933]: B27E811D8CA: to=<[email protected]>, relay=none, delay=11960, delays=11959/0.03/0.35/0, dsn=4.4.1, status=deferred (connect to lycos.co.uk[209.202.254.14]:25: Connection refused)
Apr 23 10:28:34 mail postfix/smtp[5930]: B27E811D8CA: to=<[email protected]>, relay=lists.meds.com[209.131.124.44]:25, delay=11960, delays=11959/0.02/0.32/0.07, dsn=5.1.1, status=bounced (host lists.meds.com[209.131.124.44] said: 550 5.1.1 <[email protected]>... User unknown (in reply to RCPT TO command))
Apr 23 10:28:34 mail postfix/smtp[5929]: connect to boystuff.co.uk[194.154.164.82]:25: Connection refused
Apr 23 10:28:34 mail postfix/smtp[5929]: B27E811D8CA: to=<[email protected]>, relay=none, delay=11960, delays=11959/0.02/0.39/0, dsn=4.4.1, status=deferred (connect to boystuff.co.uk[194.154.164.82]:25: Connection refused)
Apr 23 10:29:04 mail postfix/smtp[5934]: connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out
Apr 23 10:29:04 mail postfix/smtp[5934]: B27E811D8CA: to=<[email protected]>, relay=none, delay=11990, delays=11959/0.04/30/0, dsn=4.4.1, status=deferred (connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out)
Apr 23 10:29:04 mail postfix/cleanup[5893]: 3E9FA11ED0F: message-id=<[email protected]>
Apr 23 10:29:04 mail postfix/bounce[5936]: B27E811D8CA: sender non-delivery notification: 3E9FA11ED0F
Apr 23 10:29:04 mail postfix/qmgr[123]: 3E9FA11ED0F: from=, size=12629, nrcpt=1 (queue active)
Apr 23 10:29:04 mail postfix/local[5900]: error: od[getpwnam_ext]: No record for user paypal
Apr 23 10:29:04 mail postfix/pipe[5925]: 3E9FA11ED0F: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:29:04 mail postfix/qmgr[123]: 3E9FA11ED0F: removed
Apr 23 10:29:22 mail postfix/smtpd[5887]: connect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:29:22 mail postfix/trivial-rewrite[5954]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:29:22 mail postfix/smtpd[5887]: CDDB811ED14: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:29:26 mail postfix/smtpd[5887]: 2A3BF11ED15: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:29:26 mail postfix/cleanup[5893]: 2A3BF11ED15: message-id=<010901cae2f1$6222bd40$266837c0$@com>
Apr 23 10:29:26 mail postfix/qmgr[123]: 2A3BF11ED15: from=<[email protected]>, size=1347, nrcpt=2 (queue active)
Apr 23 10:29:26 mail postfix/smtpd[5887]: disconnect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:29:26 mail postfix/smtpd[5896]: connect from localhost[127.0.0.1]
Apr 23 10:29:26 mail postfix/smtpd[5896]: 6666811ED20: client=localhost[127.0.0.1]
Apr 23 10:29:26 mail postfix/cleanup[5893]: 6666811ED20: message-id=<010901cae2f1$6222bd40$266837c0$@com>
Apr 23 10:29:26 mail postfix/smtpd[5896]: disconnect from localhost[127.0.0.1]
Apr 23 10:29:26 mail postfix/qmgr[123]: 6666811ED20: from=<[email protected]>, size=1748, nrcpt=3 (queue active)
Apr 23 10:29:26 mail postfix/smtp[5894]: 2A3BF11ED15: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.29, delays=0.09/0/0/0.2, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-05, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6666811ED20)
Apr 23 10:29:26 mail postfix/smtp[5894]: 2A3BF11ED15: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.29, delays=0.09/0/0/0.2, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-05, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6666811ED20)
Apr 23 10:29:26 mail postfix/qmgr[123]: 2A3BF11ED15: removed
Apr 23 10:29:26 mail postfix/pipe[5901]: 6666811ED20: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:29:26 mail postfix/pipe[5903]: 6666811ED20: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:29:26 mail postfix/pipe[5925]: 6666811ED20: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.05, delays=0.01/0.01/0/0.03, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:29:26 mail postfix/qmgr[123]: 6666811ED20: removed
Apr 23 10:32:46 mail postfix/anvil[5891]: statistics: max connection rate 1/60s for (smtp:72.188.101.178) at Apr 23 10:27:23
Apr 23 10:32:46 mail postfix/anvil[5891]: statistics: max connection count 1 for (smtp:72.188.101.178) at Apr 23 10:27:23
Apr 23 10:32:46 mail postfix/anvil[5891]: statistics: max cache size 2 at Apr 23 10:28:20
Apr 23 10:33:34 mail postfix/qmgr[123]: 86DD811E1EC: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:33:34 mail postfix/smtp[6036]: connect to onion.com[168.143.174.97]:25: Connection refused
Apr 23 10:33:34 mail postfix/smtp[6036]: 86DD811E1EC: to=<[email protected]>, relay=none, delay=10988, delays=10988/0.04/0.12/0, dsn=4.4.1, status=deferred (connect to onion.com[168.143.174.97]:25: Connection refused)
Apr 23 10:33:41 mail postfix/smtpd[6039]: connect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:33:42 mail postfix/smtpd[6039]: lost connection after EHLO from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:33:42 mail postfix/smtpd[6039]: disconnect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:33:46 mail postfix/smtp[6032]: 86DD811E1EC: to=<[email protected]>, relay=none, delay=11000, delays=10988/0.03/12/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=finor.com type=MX: Host not found, try again)
Apr 23 10:34:04 mail postfix/smtp[6031]: connect to enterprise.america.com[68.178.232.99]:25: Operation timed out
Apr 23 10:34:04 mail postfix/smtp[6031]: 86DD811E1EC: to=<[email protected]>, relay=none, delay=11018, delays=10988/0.02/30/0, dsn=4.4.1, status=deferred (connect to enterprise.america.com[68.178.232.99]:25: Operation timed out)
Apr 23 10:34:04 mail postfix/smtp[6037]: connect to seo411.com[69.64.155.15]:25: Operation timed out
Apr 23 10:34:04 mail postfix/smtp[6037]: 86DD811E1EC: to=<[email protected]>, relay=none, delay=11018, delays=10988/0.05/30/0, dsn=4.4.1, status=deferred (connect to seo411.com[69.64.155.15]:25: Operation timed out)
Apr 23 10:34:04 mail postfix/smtp[6035]: connect to gnn.com[205.188.100.58]:25: Operation timed out
Apr 23 10:34:34 mail postfix/smtp[6035]: connect to gnn.com[64.12.79.57]:25: Operation timed out
Apr 23 10:35:04 mail postfix/smtp[6035]: connect to gnn.com[207.200.74.38]:25: Operation timed out
Apr 23 10:35:04 mail postfix/smtp[6035]: 86DD811E1EC: to=<[email protected]>, relay=none, delay=11078, delays=10988/0.03/90/0, dsn=4.4.1, status=deferred (connect to gnn.com[207.200.74.38]:25: Operation timed out)
Apr 23 10:37:02 mail postfix/anvil[6041]: statistics: max connection rate 1/60s for (submission:166.137.138.184) at Apr 23 10:33:41
Apr 23 10:37:02 mail postfix/anvil[6041]: statistics: max connection count 1 for (submission:166.137.138.184) at Apr 23 10:33:41
Apr 23 10:37:02 mail postfix/anvil[6041]: statistics: max cache size 1 at Apr 23 10:33:41
Apr 23 10:38:55 mail postfix/smtpd[6134]: connect from web50903.mail.re2.yahoo.com[206.190.38.123]
Apr 23 10:38:55 mail postfix/trivial-rewrite[6139]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:38:55 mail postfix/smtpd[6134]: 81B5111ED6B: client=web50903.mail.re2.yahoo.com[206.190.38.123]
Apr 23 10:38:55 mail postfix/cleanup[6140]: 81B5111ED6B: message-id=<[email protected]>
Apr 23 10:38:55 mail postfix/qmgr[123]: 81B5111ED6B: from=<[email protected]>, size=11541, nrcpt=2 (queue active)
Apr 23 10:38:55 mail postfix/smtpd[6134]: disconnect from web50903.mail.re2.yahoo.com[206.190.38.123]
Apr 23 10:38:56 mail postfix/smtpd[6143]: connect from localhost[127.0.0.1]
Apr 23 10:38:56 mail postfix/smtpd[6143]: 383D711ED78: client=localhost[127.0.0.1]
Apr 23 10:38:56 mail postfix/cleanup[6140]: 383D711ED78: message-id=<[email protected]>
Apr 23 10:38:56 mail postfix/smtpd[6143]: disconnect from localhost[127.0.0.1]
Apr 23 10:38:56 mail postfix/qmgr[123]: 383D711ED78: from=<[email protected]>, size=11942, nrcpt=3 (queue active)
Apr 23 10:38:56 mail postfix/smtp[6141]: 81B5111ED6B: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.5/0.01/0/0.57, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-10, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 383D711ED78)
Apr 23 10:38:56 mail postfix/smtp[6141]: 81B5111ED6B: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.5/0.01/0/0.57, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-10, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 383D711ED78)
Apr 23 10:38:56 mail postfix/qmgr[123]: 81B5111ED6B: removed
Apr 23 10:38:56 mail postfix/pipe[6147]: 383D711ED78: to=<[email protected]>, relay=dovecot, delay=0.08, delays=0.01/0.04/0/0.03, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:38:56 mail postfix/pipe[6149]: 383D711ED78: to=<[email protected]>, relay=dovecot, delay=0.09, delays=0.01/0.05/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:38:56 mail postfix/pipe[6152]: 383D711ED78: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.09, delays=0.01/0.06/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:38:56 mail postfix/qmgr[123]: 383D711ED78: removed
Apr 23 10:39:09 mail postfix/smtpd[6134]: connect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:39:09 mail postfix/trivial-rewrite[6155]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:39:09 mail postfix/smtpd[6134]: 635B511ED7F: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:39:12 mail postfix/smtpd[6134]: C24D411ED80: client=178.101.188.72.cfl.res.rr.com[72.188.101.178], sasl_method=LOGIN, sasl_username=martha
Apr 23 10:39:12 mail postfix/cleanup[6140]: C24D411ED80: message-id=<010a01cae2f2$bfc34950$3f49dbf0$@com>
Apr 23 10:39:12 mail postfix/qmgr[123]: C24D411ED80: from=<[email protected]>, size=8809, nrcpt=2 (queue active)
Apr 23 10:39:12 mail postfix/smtpd[6134]: disconnect from 178.101.188.72.cfl.res.rr.com[72.188.101.178]
Apr 23 10:39:13 mail postfix/smtpd[6143]: connect from localhost[127.0.0.1]
Apr 23 10:39:13 mail postfix/trivial-rewrite[6155]: warning: do not list domain 4rsmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:39:13 mail postfix/smtpd[6143]: 8D7F011ED91: client=localhost[127.0.0.1]
Apr 23 10:39:13 mail postfix/cleanup[6140]: 8D7F011ED91: message-id=<010a01cae2f2$bfc34950$3f49dbf0$@com>
Apr 23 10:39:13 mail postfix/smtpd[6143]: disconnect from localhost[127.0.0.1]
Apr 23 10:39:13 mail postfix/qmgr[123]: 8D7F011ED91: from=<[email protected]>, size=9210, nrcpt=3 (queue active)
Apr 23 10:39:13 mail postfix/smtp[6141]: C24D411ED80: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.83, delays=0.12/0/0/0.71, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-06, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 8D7F011ED91)
Apr 23 10:39:13 mail postfix/smtp[6141]: C24D411ED80: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.83, delays=0.12/0/0/0.71, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=04705-06, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 8D7F011ED91)
Apr 23 10:39:13 mail postfix/qmgr[123]: C24D411ED80: removed
Apr 23 10:39:13 mail postfix/pipe[6149]: 8D7F011ED91: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:39:13 mail postfix/pipe[6147]: 8D7F011ED91: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.05, delays=0.01/0/0/0.04, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:39:18 mail postfix/smtp[6157]: 8D7F011ED91: host ninja1.spamninjas.com[71.43.194.115] said: 451 4.7.1 <[email protected]>: Recipient address rejected: Greylisted for 5 minutes (in reply to RCPT TO command)
Apr 23 10:39:30 mail postfix/smtp[6157]: 8D7F011ED91: to=<[email protected]>, relay=ninja2.spamninjas.com[72.19.140.201]:25, delay=17, delays=0.01/0.02/5.4/11, dsn=4.7.1, status=deferred (host ninja2.spamninjas.com[72.19.140.201] said: 451 4.7.1 <[email protected]>: Recipient address rejected: Greylisted for 5 minutes (in reply to RCPT TO command))
Apr 23 10:40:51 mail postfix/smtpd[6134]: connect from ecbiz71.inmotionhosting.com[173.205.124.201]
Apr 23 10:40:51 mail postfix/trivial-rewrite[6191]: warning: do not list domain 4RSmokehouse.com in BOTH mydestination and virtualaliasdomains
Apr 23 10:40:51 mail postfix/smtpd[6134]: CED4A11ED9F: client=ecbiz71.inmotionhosting.com[173.205.124.201]
Apr 23 10:40:51 mail postfix/cleanup[6140]: CED4A11ED9F: message-id=<[email protected]>
Apr 23 10:40:51 mail postfix/qmgr[123]: CED4A11ED9F: from=<[email protected]>, size=9492, nrcpt=2 (queue active)
Apr 23 10:40:52 mail postfix/smtpd[6134]: disconnect from ecbiz71.inmotionhosting.com[173.205.124.201]
Apr 23 10:40:52 mail postfix/smtpd[6143]: connect from localhost[127.0.0.1]
Apr 23 10:40:52 mail postfix/smtpd[6143]: 6B83111EDB5: client=localhost[127.0.0.1]
Apr 23 10:40:52 mail postfix/cleanup[6140]: 6B83111EDB5: message-id=<[email protected]>
Apr 23 10:40:52 mail postfix/smtpd[6143]: disconnect from localhost[127.0.0.1]
Apr 23 10:40:52 mail postfix/qmgr[123]: 6B83111EDB5: from=<[email protected]>, size=9893, nrcpt=3 (queue active)
Apr 23 10:40:52 mail postfix/smtp[6141]: CED4A11ED9F: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.58/0/0/0.5, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-11, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6B83111EDB5)
Apr 23 10:40:52 mail postfix/smtp[6141]: CED4A11ED9F: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.58/0/0/0.5, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=02711-11, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6B83111EDB5)
Apr 23 10:40:52 mail postfix/qmgr[123]: CED4A11ED9F: removed
Apr 23 10:40:52 mail postfix/pipe[6149]: 6B83111EDB5: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:40:52 mail postfix/pipe[6149]: 6B83111EDB5: to=<[email protected]>, orig_to=<[email protected]>, relay=dovecot, delay=0.13, delays=0.01/0.02/0/0.1, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:40:52 mail postfix/pipe[6147]: 6B83111EDB5: to=<[email protected]>, relay=dovecot, delay=0.13, delays=0.01/0/0/0.12, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:40:52 mail postfix/qmgr[123]: 6B83111EDB5: removed
Apr 23 10:43:34 mail postfix/qmgr[123]: 4BB8111D76B: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:43:47 mail postfix/smtp[6240]: 4BB8111D76B: to=<[email protected]>, relay=none, delay=13025, delays=13012/0.02/13/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=twbg.co.uk type=MX: Host not found, try again)
Apr 23 10:44:12 mail postfix/anvil[6138]: statistics: max connection rate 1/60s for (smtp:206.190.38.123) at Apr 23 10:38:55
Apr 23 10:44:12 mail postfix/anvil[6138]: statistics: max connection count 1 for (smtp:206.190.38.123) at Apr 23 10:38:55
Apr 23 10:44:12 mail postfix/anvil[6138]: statistics: max cache size 2 at Apr 23 10:39:09
Apr 23 10:48:20 mail postfix/smtpd[6320]: connect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:48:21 mail postfix/smtpd[6320]: lost connection after EHLO from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:48:21 mail postfix/smtpd[6320]: disconnect from mobile-166-137-138-184.mycingular.net[166.137.138.184]
Apr 23 10:48:34 mail postfix/qmgr[123]: 3711011DA69: from=<[email protected]>, size=10726, nrcpt=2 (queue active)
Apr 23 10:48:34 mail postfix/qmgr[123]: 56E4F11DAC5: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:48:34 mail postfix/qmgr[123]: 5CC8B11E265: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:48:34 mail postfix/qmgr[123]: 8D7F011ED91: from=<[email protected]>, size=9210, nrcpt=3 (queue active)
Apr 23 10:48:34 mail postfix/qmgr[123]: CAA4E11D93C: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:48:34 mail postfix/smtp[6328]: connect to lycos.co.uk[209.202.254.14]:25: Connection refused
Apr 23 10:48:34 mail postfix/smtp[6328]: 56E4F11DAC5: to=<[email protected]>, relay=none, delay=12967, delays=12967/0.01/0.1/0, dsn=4.4.1, status=deferred (connect to lycos.co.uk[209.202.254.14]:25: Connection refused)
Apr 23 10:48:34 mail postfix/smtp[6332]: connect to sylvester.faho.rwth-aachen.de[134.130.57.2]:25: Connection refused
Apr 23 10:48:34 mail postfix/smtp[6332]: 56E4F11DAC5: to=<[email protected]>, relay=none, delay=12967, delays=12967/0.04/0.26/0, dsn=4.4.1, status=deferred (connect to sylvester.faho.rwth-aachen.de[134.130.57.2]:25: Connection refused)
Apr 23 10:48:34 mail postfix/smtp[6335]: 5CC8B11E265: host mx1.mail.eu.yahoo.com[77.238.177.9] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:48:35 mail postfix/smtp[6337]: connect to mail.suchknecht.at[62.93.251.235]:25: Connection refused
Apr 23 10:48:35 mail postfix/smtp[6337]: CAA4E11D93C: to=<[email protected]>, relay=none, delay=13115, delays=13115/0.07/0.59/0, dsn=4.4.1, status=deferred (connect to mail.suchknecht.at[62.93.251.235]:25: Connection refused)
Apr 23 10:48:35 mail postfix/smtp[6336]: 8D7F011ED91: to=<[email protected]>, relay=ninja1.spamninjas.com[71.43.194.115]:25, delay=562, delays=561/0.07/0.12/0.58, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as ECE28106F97)
Apr 23 10:48:35 mail postfix/qmgr[123]: 8D7F011ED91: removed
Apr 23 10:48:35 mail postfix/smtp[6327]: 3711011DA69: to=<[email protected]>, relay=h.mx.mail.yahoo.com[66.94.236.34]:25, delay=13006, delays=13005/0.02/0.38/0.62, dsn=5.7.5, status=bounced (host h.mx.mail.yahoo.com[66.94.236.34] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:35 mail postfix/cleanup[6340]: 7D22411EDF0: message-id=<[email protected]>
Apr 23 10:48:35 mail postfix/bounce[6339]: 3711011DA69: sender non-delivery notification: 7D22411EDF0
Apr 23 10:48:35 mail postfix/qmgr[123]: 7D22411EDF0: from=, size=12888, nrcpt=1 (queue active)
Apr 23 10:48:35 mail postfix/qmgr[123]: 3711011DA69: removed
Apr 23 10:48:35 mail postfix/local[6341]: error: od[getpwnam_ext]: No record for user paypal
Apr 23 10:48:35 mail postfix/pipe[6342]: 7D22411EDF0: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0.01/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:48:35 mail postfix/qmgr[123]: 7D22411EDF0: removed
Apr 23 10:48:36 mail postfix/smtp[6330]: 56E4F11DAC5: host www.poleboy.de[62.75.143.131] said: 451 Temporary local problem - please try later (in reply to RCPT TO command)
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:36 mail postfix/smtp[6335]: 5CC8B11E265: to=<[email protected]>, relay=mx2.mail.eu.yahoo.com[77.238.184.241]:25, delay=11640, delays=11638/0.07/0.95/1, dsn=5.7.5, status=bounced (host mx2.mail.eu.yahoo.com[77.238.184.241] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:48:41 mail postfix/smtp[6330]: 56E4F11DAC5: to=<[email protected]>, relay=poleboy.de[62.75.143.131]:25, delay=12975, delays=12967/0.03/2.2/5.1, dsn=4.0.0, status=deferred (host poleboy.de[62.75.143.131] said: 451 Temporary local problem - please try later (in reply to RCPT TO command))
Apr 23 10:48:47 mail postfix/smtp[6331]: 56E4F11DAC5: to=<[email protected]>, relay=none, delay=12980, delays=12967/0.04/13/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=sanffo.co.uk type=MX: Host not found, try again)
Apr 23 10:48:47 mail postfix/smtp[6333]: 5CC8B11E265: to=<[email protected]>, relay=none, delay=11651, delays=11638/0.05/13/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=alyssiasgrove.co.uk type=MX: Host not found, try again)
Apr 23 10:49:04 mail postfix/smtp[6329]: connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out
Apr 23 10:49:04 mail postfix/smtp[6329]: 56E4F11DAC5: to=<[email protected]>, relay=none, delay=12997, delays=12967/0.02/30/0, dsn=4.4.1, status=deferred (connect to mygfx.co.uk[80.168.100.101]:25: Operation timed out)
Apr 23 10:49:04 mail postfix/smtp[6334]: connect to nationalvoice.org[216.8.179.23]:25: Operation timed out
Apr 23 10:49:04 mail postfix/smtp[6334]: 5CC8B11E265: to=<[email protected]>, relay=none, delay=11669, delays=11638/0.05/30/0, dsn=4.4.1, status=deferred (connect to nationalvoice.org[216.8.179.23]:25: Operation timed out)
Apr 23 10:49:04 mail postfix/cleanup[6340]: E0FE911EDF8: message-id=<[email protected]>
Apr 23 10:49:04 mail postfix/bounce[6339]: 5CC8B11E265: sender non-delivery notification: E0FE911EDF8
Apr 23 10:49:04 mail postfix/qmgr[123]: E0FE911EDF8: from=, size=29336, nrcpt=1 (queue active)
Apr 23 10:49:04 mail postfix/local[6341]: error: od[getpwnam_ext]: No record for user paypal
Apr 23 10:49:04 mail postfix/pipe[6342]: E0FE911EDF8: to=<[email protected]>, relay=dovecot, delay=0.02, delays=0.01/0/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:49:04 mail postfix/qmgr[123]: E0FE911EDF8: removed
Apr 23 10:51:41 mail postfix/anvil[6324]: statistics: max connection rate 1/60s for (submission:166.137.138.184) at Apr 23 10:48:20
Apr 23 10:51:41 mail postfix/anvil[6324]: statistics: max connection count 1 for (submission:166.137.138.184) at Apr 23 10:48:20
Apr 23 10:51:41 mail postfix/anvil[6324]: statistics: max cache size 1 at Apr 23 10:48:20
Apr 23 10:53:34 mail postfix/qmgr[123]: 5318011DDFB: from=<[email protected]>, size=10710, nrcpt=2 (queue active)
Apr 23 10:53:34 mail postfix/qmgr[123]: 7723311DE03: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:53:34 mail postfix/qmgr[123]: A63AD11DDCA: from=<[email protected]>, size=10704, nrcpt=2 (queue active)
Apr 23 10:53:34 mail postfix/qmgr[123]: BC71311DCA6: from=<[email protected]>, size=10708, nrcpt=2 (queue active)
Apr 23 10:53:34 mail postfix/qmgr[123]: CA71611DDD3: from=<[email protected]>, size=10652, nrcpt=50 (queue active)
Apr 23 10:53:34 mail postfix/qmgr[123]: F07E311DCDD: from=<[email protected]>, size=10706, nrcpt=2 (queue active)
Apr 23 10:53:34 mail postfix/smtp[6435]: connect to lycos.co.uk[209.202.254.14]:25: Connection refused
Apr 23 10:53:34 mail postfix/smtp[6435]: 7723311DE03: to=<[email protected]>, relay=none, delay=12957, delays=12957/0.03/0.06/0, dsn=4.4.1, status=deferred (connect to lycos.co.uk[209.202.254.14]:25: Connection refused)
Apr 23 10:53:34 mail postfix/smtp[6435]: 7723311DE03: to=<[email protected]>, relay=none, delay=12957, delays=12957/0.03/0.06/0, dsn=4.4.1, status=deferred (connect to lycos.co.uk[209.202.254.14]:25: Connection refused)
Apr 23 10:53:34 mail postfix/smtp[6432]: 5318011DDFB: host d.mx.mail.yahoo.com[209.191.88.254] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:34 mail postfix/smtp[6438]: 7723311DE03: host mx1.mail.eu.yahoo.com[77.238.177.9] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:35 mail postfix/smtp[6439]: A63AD11DDCA: host mx2.mail.eu.yahoo.com[77.238.184.241] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:35 mail postfix/smtp[6444]: F07E311DCDD: to=<[email protected]>, relay=e.mx.mail.yahoo.com[67.195.168.230]:25, delay=13138, delays=13137/0.07/0.12/0.53, dsn=5.7.5, status=bounced (host e.mx.mail.yahoo.com[67.195.168.230] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Apr 23 10:53:35 mail postfix/cleanup[6447]: 367E111EE16: message-id=<[email protected]>
Apr 23 10:53:35 mail postfix/bounce[6446]: F07E311DCDD: sender non-delivery notification: 367E111EE16
Apr 23 10:53:35 mail postfix/qmgr[123]: 367E111EE16: from=, size=12840, nrcpt=1 (queue active)
Apr 23 10:53:35 mail postfix/qmgr[123]: F07E311DCDD: removed
Apr 23 10:53:35 mail postfix/local[6448]: error: od[getpwnam_ext]: No record for user paypal
Apr 23 10:53:35 mail postfix/pipe[6449]: 367E111EE16: to=<[email protected]>, relay=dovecot, delay=0.03, delays=0.01/0.01/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 23 10:53:35 mail postfix/qmgr[123]: 367E111EE16: removed
Apr 23 10:53:35 mail postfix/smtp[6432]: 5318011DDFB: host a.mx.mail.yahoo.com[67.195.168.31] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:35 mail postfix/smtp[6440]: BC71311DCA6: host h.mx.mail.yahoo.com[66.94.236.34] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:35 mail postfix/smtp[6440]: BC71311DCA6: host d.mx.mail.yahoo.com[209.191.88.254] refused to talk to me: 421 4.7.0 [GL01] Message from (24.227.121.138) temporarily deferred - 4.16.50. Please refer to http://postmaster.yahoo.com/errors/postmaster-21.html
Apr 23 10:53:35 mail postfix/smtp[6433]: 7723311DE03: to=<[email protected]>, relay=mx1.bt.mail.yahoo.com[212.82.111.207]:25, delay=12958, delays=12957/0.02/0.58/0.86, dsn=5.7.5, status=bounced (host mx1.bt.mail.yahoo.com[212.82.111.207] said: 554 5.7.5 (AU01) Message not accepted for policy reasons. See http://postmaster.yahoo.com/errors/postmaster-28.html (in reply to end of DATA command))
Similar Messages
-
OSX server sending out "spam?"
I'm a student at a technical college and am working part time for the Mac admin guy. We have about 400 macs in the art dept. Yesterday our sysadmin said our server was sending out spam.
This server is not running mail but here are a couple of excerpts from our mail.log:
Aug 7 06:40:38 servername postfix/pickup[14340]: 547BE6B7AB8: uid=1032 from=<image>
Aug 7 06:40:38 servername postfix/cleanup[14552]: 547BE6B7AB8: message-id=<20070807114037.547BE6B7AB8@servername>
Aug 7 06:40:38 servername postfix/qmgr[14556]: 547BE6B7AB8: from=<[email protected]>, size=1675, nrcpt=1 (queue active)
Aug 7 06:40:45 servername postfix/smtp[14557]: 547BE6B7AB8: host g.mx.mail.yahoo.com[206.190.53.191] said: 421 Message temporarily deferred - 4.16.51. Please refer to http://help.yahoo.com/help/us/mail/defer/defer-06.html (in reply to end of DATA command)
Aug 7 06:40:45 servername postfix/smtp[14557]: 547BE6B7AB8: to=<[email protected]>, relay=d.mx.mail.yahoo.com[216.39.53.2], delay=8, status=sent (250 ok dirdel)
Aug 7 06:40:45 servername postfix/qmgr[14556]: 547BE6B7AB8: removed
Aug 7 06:44:23 servername postfix/pickup[14340]: C0F876B7AC2: uid=1032 from=<image>
Aug 7 06:44:23 servername postfix/cleanup[14600]: C0F876B7AC2:message-id=<20070807114423.C0F876B7AC2@servername>
Aug 7 06:44:23 servername postfix/qmgr[14556]: C0F876B7AC2: from=<[email protected]>, size=1626, nrcpt=1 (queue active)
Aug 7 06:44:23 servername postfix/pickup[14340]: C8D2C6B7AC4: uid=1032 from=<image>
Aug 7 06:44:23 servername postfix/cleanup[14600]: C8D2C6B7AC4: message-id=<20070807114423.C8D2C6B7AC4@servername>
Aug 7 06:44:23 servername postfix/pickup[14340]: CEC0B6B7AC6: uid=1032 from=<image>
Aug 7 06:44:23 servername postfix/cleanup[14600]: CEC0B6B7AC6:message-id=<20070807114423.CEC0B6B7AC6@servername>
Aug 7 06:44:23 servername postfix/qmgr[14556]: C0F876B7AC2: to=<[email protected]>, relay=none, delay=0, status=bounced (invalid recipient syntax: "[email protected]")
Aug 7 06:44:23 servername postfix/qmgr[14556]: C8D2C6B7AC4: from=<[email protected]>, size=1624, nrcpt=1 (queue active)
Aug 7 06:44:23 servername postfix/cleanup[14600]: DA8706B7AC9: message-id=<20070807114423.DA8706B7AC9@servername>
and
Aug 8 10:11:57 servername postfix/qmgr2338: DADE98C3EB9: to=<[email protected]>, relay=none, delay=14040, status=deferred (delivery temporarily suspended: host ironport1.chron.comhttp://130.80.29.15 refused to talk to me: 554 ironport1.chron.com)
Aug 8 10:11:57 servername postfix/qmgr2338: E89098C1C03: to=<[email protected]>, relay=none, delay=14082, status=deferred (delivery temporarily suspended: host ironport1.chron.comhttp://130.80.29.15 refused to talk to me: 554 ironport1.chron.com)
Aug 8 10:11:57 servername postfix/qmgr2338: EEE378C2CB3: to=<[email protected]>, relay=none, delay=14231, status=deferred (delivery temporarily suspended: host ironport1.chron.comhttp://130.80.29.15 refused to talk to me: 554 ironport1.chron.com)
Aug 8 10:11:57 servername postfix/smtp13748: 2C26E8979B3: to=<[email protected]>, relay=mx-nj-2.pobox.comhttp://208.210.124.72, delay=39263, status=deferred (host mx-nj-2.pobox.comhttp://208.210.124.72 said: 450 <[email protected]>: Sender address rejected: Domain not found (in reply to RCPT TO command))
Aug 8 10:11:57 servername postfix/smtp13748: 2BC7D8C61AC: to=<[email protected]>, relay=mail.cyberscope.nethttp://64.95.223.22, delay=13796, status=deferred (host mail.cyberscope.nethttp://64.95.223.22 said: 451 unable to accept non-FQDN HELO (#4.3.0) (in reply to MAIL FROM command))
Aug 8 10:11:57 servername postfix/smtp13748: connect to cluster9.us.messagelabs.comhttp://216.82.253.115: Connection refused (port 25)
Aug 8 10:11:57 servername postfix/smtp13748: connect to cluster9.us.messagelabs.comhttp://216.82.250.99: Connection refused (port 25)
Aug 8 10:11:57 servername postfix/smtp13748: connect to cluster9.us.messagelabs.comhttp://216.82.250.115: Connection refused (port 25)
We set up VirusBarrier and scanned the server. This is a copy of our console.log:
Mac OS X Version 10.4.9 (Build 8P135)
2007-08-08 10:20:50 -0500
2007-08-08 10:20:55.538 SystemUIServer486 lang is:en
Aug 8 10:22:39 servername authexec: executing /Library/Intego/netupdated.bundle/Contents/Resources/NetUpdate Installer.app/Contents/MacOS/NetUpdate Installer
Aug 8 10:49:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
Aug 8 10:49:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/kupdateb
virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/src/mech
virus OSX.PsyBot.232 found in file: /Volumes/Startup OS X/private/var/tmp/psybnc/psybnc
Aug 8 11:19:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
Aug 8 11:19:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/kupdateb
virus OSX.Botch.Gen found in file: /Volumes/Startup OS X/private/var/tmp/ /mech/src/mech
<CFURL 0x62bd440 0xa07bc150>{type = 15, string = file://localhost/Library/Contextual%20Menu%20Items/PortfolioCM.plugin/, base = (null)}
Finder tool: request to change uid to 501 gid to -1 for /private/tmp/vbx4smail_6v97Qz
virus Resource structure error found in file: /Volumes/Image Backup Drive/Old Labs Images/345 iMacs/Macintosh HD/System Folder/Help/HP LaserJet Printer Help/Help/Graphics/printer_word.JPG
Aug 8 11:49:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
Aug 8 11:49:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/animations/flahsbathtub/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/animations/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/contact/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/illustrations/photomontage/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/illustrations/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/images/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/greennotes/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/madisonframes/ARTWORK/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/makingcrepes/crepesjpeg/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/WS_FTP.LOG
virus Resource structure error found in file: /Volumes/Image Backup Drive/.Trashes/501/printer_word.JPG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-37.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-41.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-45.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-01.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-15.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-22.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/greennotes/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/madisonframes/ARTWORK/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/makingcrepes/crepesjpeg/WS_FTP.LOG
Aug 8 12:19:43 servername servermgrd: servermgr_dns: no name available via DNS for our IP addy
Aug 8 12:19:43 servername servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
<CFURL 0x5004b0 0xa07bc150>{type = 15, string = file://localhost/Library/Contextual%20Menu%20Items/PortfolioCM.plugin/, base = (null)}
<CFURL 0x3a5c30 0xa07bc150>{type = 15, string = file://localhost/Library/Contextual%20Menu%20Items/PortfolioCM.plugin/, base = (null)}
Aug 8 12:26:21 servername ARDAgent 320: no multicast
virus Resource structure error found in file: /Volumes/Image Backup Drive/.Trashes/501/printer_word.JPG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-37.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-41.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-08-45.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-01.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-15.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP 12-09-22.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/.Trashes/501/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/greennotes/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/madisonframes/ARTWORK/WS_FTP.LOG
virus Resource error : data offset > Res. map offset found in file: /Volumes/Image Backup Drive/Old Labs Images/Portfolio/Mac HD/Desktop Folder/Portfolios/SMVandre/websites/makingcrepes/crepesjpeg/WS_FTP.LOG
Aug 8 12:29:49 servername cyrus-quota1693: DBERROR: reading /var/imap/db/skipstamp, assuming the worst: No such file or directory
at which point we rebooted.
So we have changed all are passwords, are reimaging everything and had the sysadmin block all outgoing messages on port 25. In addition we have sent copies of the logs to Intego.
That all happened Wednesday. Unfortunately this mornings system log had:
Aug 10 02:58:45 servername VirusBarrierServer[461]: File infected: /private/var/tmp/.blan/.bot/rom by OSX.Botch.302
Aug 10 02:59:08 servername VirusBarrierServer[461]: File infected: /private/var/tmp/.ou/.bot/ru by OSX.Botch.302
Aug 10 02:59:28 servername VirusBarrierServer[461]: File infected: /private/var/tmp/.tmp/ /.bot/darwin by OSX.Botch.302
Aug 10 02:59:49 servername VirusBarrierServer[461]: File infected: /private/var/tmp/.tmp/.bot/crond by OSX.Botch.302
I know that this is an incredibly vague question but what would you suggest I do now?
Is there a way to find out where these "virus'" came from?
It is not impossible they were put on by a student as we recently found out that a number of the help desk students had the Mac admin password. I've looked at the install logs and the only things I see are the Apple software updates and apps we installed ourselves.
I realize that no mac virus' or worms have been found in the wild so it is unclear what VirusBarrier is reporting but it seems that ummm "something" is hiding somewhere and "infecting" these files and I'd like to get rid of it.
thanks for your time and help )
lex
Message was edited by: LexaniGWhat appears to be happening is that something is installing the IRC bot EnergyMech in hidden files on our server.
Aug 10 02:59:28 servername VirusBarrierServer461: File infected: /private/var/tmp/.tmp/ /.bot/darwin by OSX.Botch.302
When I checked the contents of the .tmp file with ls -Rla I found:
.tmp/ :
otal 1320
drwxr-xr-x 4 image wheel 136 Jun 24 19:44 .
drwxr-xr-x 5 image wheel 170 Jun 24 19:44 ..
drwx------ 16 image wheel 544 Jun 24 20:00 .bot
-rw-r--r-- 1 image wheel 675159 Jun 24 19:44 sclavi.tar
.tmp/ /.bot:
total 2144
drwx------ 16 image wheel 544 Jun 24 20:00 .
drwxr-xr-x 4 image wheel 136 Jun 24 19:44 ..
-rw-r--r-- 1 image wheel 351 Jun 28 10:00 1
-rw-r--r-- 1 image wheel 351 Jun 28 10:00 2
-rw-r--r-- 1 image wheel 351 Jun 28 07:00 3
-rwx------ 1 image wheel 412095 Jul 8 2005 bash
-rwxr-xr-x 1 image wheel 0 Aug 10 02:59 darwin
-rw-r--r-- 1 image wheel 354306 Oct 19 2005 freebsd
-rw------- 1 image wheel 22465 Jun 13 2001 mech.help
-rw-r--r-- 1 image wheel 1015 Jun 28 10:00 mech.levels
-rw------- 1 image wheel 6 Jun 24 19:44 mech.pid
-rw-r--r-- 1 image wheel 1457 Jun 28 10:00 mech.session
-rw-r--r-- 1 image wheel 5365 May 4 11:34 mech.set
-rwxr-xr-x 1 image wheel 178908 Sep 20 2005 pico
-rw-r--r-- 1 image wheel 87673 Jun 27 2006 pico.tgz
drwx------ 10 image wheel 340 May 27 2004 randfiles
After chmoding the files so that they were non-excecutable mech.set contained this:
# Zei`s EnergyMech configuration file
# v2.9.3 - CristofoR
##### Linking #####
#ENTITY emech
#LINKPASS abc123
#LINKPORT 49152
#LINK hismech a1b2c3 mech.host.net 49152
#LINK hermech abcdefg 0 0
AUTOLINK
##### Server List ####
SERVER LosAngeles.CA.US.Undernet.org 6665
SERVER LosAngeles.CA.US.Undernet.org 6668
SERVER LosAngeles.CA.US.Undernet.org 7000
Unfortunately as a student I theoretically don't have access to the server again until Monday... But I'll go in tomorrow and try and find someone to turn it off. heh (I suppose one way to find out who's on call is to shut it down and see who shows up...) In any case I'll try and delete any of these files I can find.
My boss is out of town and I'm over my head here so any and all suggestions will be gratefully received.
thanks
lex
Message was edited by: LexaniG
Message was edited by: LexaniG -
Snow Leopard Server - SSL Certificate Issue
Hi. I am hoping someone can shine some light into an issue I am currently experiencing with SSL Certificates on the Snow Leopard Server which hosts out websites. This past weekend an SSL certificate pertaining to our primary domain expired which caused users to receive error messages prior to accessing the website ... the error message stated "the site's security certificate has expired!"
I have since renewed the certificate via networksolutions.com and applied it on the Mac server. The certificate was applied successfully and i have added the certificate the sites along with restarting the apache to take in the settings. However, the certificate is not propagating out at all. I have also restarted the mac server as well in case there was something in the cache causing issues but unfortunately, the issue still exists.
I have also removed the certificate entirely and reapplied it from scartch to make sure the original certificate wasn't causing any issues.
Has anyone else incurred a similar issue or would anyone have any insight on how to possibly resolve the issue?
Thank you!Just a quick update. the DNS seems fine but I am getting errors in the logs as follows.
May 12 09:37:34 server jabberd/sm[2084]: version: jabberd sm 2.1.24.1-326.5
May 12 09:37:34 server org.jabber.jabberd[2082]: ERROR: router died. Shutting down server.
May 12 09:37:34 server com.apple.launchd[1] (org.jabber.jabberd): Throttling respawn: Will start in 10 seconds
May 12 09:37:34 server jabberd/sm[2084]: attempting connection to router at 127.0.0.1, port=5347
May 12 09:37:34 server jabberd/sm[2084]: shutting down
May 12 09:38:45 server jabberd/sm[2167]: version: jabberd sm 2.1.24.1-326.5
May 12 09:38:45 server jabberd/sm[2167]: attempting connection to router at 127.0.0.1, port=5347
May 12 09:38:45 server jabberd/sm[2167]: shutting down
May 12 09:38:45 server org.jabber.jabberd[2165]: ERROR: router died. Shutting down server.
May 12 09:38:45 server com.apple.launchd[1] (org.jabber.jabberd): Throttling respawn: Will start in 10 seconds
I checked the the crash report which has the follow kernal issue.
Exception Type: EXCBADACCESS (SIGBUS)
Exception Codes: KERNPROTECTIONFAILURE at 0x000000010011adb0
Crashed Thread: 0 Dispatch queue: com.apple.main-thread
Any ideas? -
Is it possible to install Lion on the second hard disk on my Mini (2010) Snow Leopard Server, and switch between Lion and Snow Leopard? I like those voices Lion has in speech.
When baltwosaid NO emphatically, that was described as CORRECT ANSWER. Ditto in the caeses of the radically different answers from Camelotand Matt Clifton
Could it be that CORRECT ANSWER needs better defining by Apple?
That apart, yes, switching might involve rebooting. About the voices, well, I was the other day adding voice to a commentary in a video I was working on. There's only American English accent in SL — Lion I believe has British ones as well.
Why not, I wondered, try to install Lion purely for academic interest, maybe with an SD card (Sandisk Ultra II, 16GB) as Tom Nelson says is possible at http://macs.about.com/od/macoperatingsystems/ss/Perform-A-Clean-Install-Of-Os-X- Lion-On-Your-Mac.htm -
I want to install Snow Leopard Server on our MacPro(2.66) using Mac Mini Snow Leopard Server disks? I kept getting an error for backwards compatibility. Is this possible or do I need topurchase another copy of Snow Leopard Server?
The OS disks that are shipped with a particular product
are set up so that tey will only install on that product.
It will install on any Mini of that exact vintage, but that
is all.
This is to prevent people from doing exactly what you
are trying to do. The license for OSX shipped with any
is only valid for that product. Also, Snow Leopard,
including Server, is only permitted to be run on one
computer at a time. Bottom line, unlike Lion, legally
you cannot install the same copy on multiple
computers unless some "family pack" or site license
is purchased.
Yes, you need to purchase another copy.
The copy of Snow Leopard license is here:
http://images.apple.com/legal/sla/docs/macosx_snowleopard.pdf -
Snow Leopard Server running extremely slow all of a sudden!!
Hi, I'm not a qualified server technician but am currently trying my best to run a server in a Secondary School! Please help, need to fix ASAP.
So basically we've got a Mac Pro running Snow Leopard server which has become incredibly slow in the past week. Nothing has changed in our department to trigger this. Here's everything I know so far...
- If I try to log on to the admin account when "Some Network Accounts Are Available", log on will take under a minute. If I try to log on to the admin account when the light goes green and "Network Accounts Are Available" log on will take forever and eventually just crash and which point I have to just force a shutdown and try again.
- When I can log on, some aspects of the computing seems fast and other aspects are really slow. For example, a few programs open as soon as I log on no problem, however a simple spotlight search or trying to open Sytem Preferences will crash the computer completely.
- Have tried booting in Safe Mode, and everything ran fast and how it's mean to but once restarting and booting normally the problems remained.
Sorry for the lack of knowledge!!
Thanks in advance.Your comment indicates "crash the computer"? Do you mean that OS X Server itself fails, and you have to reboot? Or that the application crashes, and you have to restart it?
The following are some general approaches toward gathering some data:
Launch Console.app from Applications > Utilities and see if there are blocks of repeating errors.
Launch Terminal.app from Applications > Utilities and issue the following harmess, diagnostic command:
sudo changeip -checkhostname
After entering an administrative password and possibly seeing a one-time informational message about sudo, you should see some network configuration information and then an indication that no changes are required, or that there are DNS or network errors.
Boot from the Snow Leopard installation DVD and run a volume verification pass using Disk Utility, this from the Utilities menu of the installation disl.
FWIW...
If the applications or OS X Server are crashing, then you're generally heard toward either a reinstallation of the software, or a hardware repair, or quite possibly a combination of the two.
Forcing a hard shutdown can lead to corruptions, depending on exactly what's going on when the power drops out; that's probably best left as a last-resort approach and one best avoided. -
How to enter hidden SSID in Snow Leopard Server
I am re-installing Snow Leopard Server on a Mac Mini Server (2009) from the recovery disk. I successfully installed, using Remote Installation. However, it did not keep my network settings. The SSID is hidden, so normally, I would select to enter "other network". But, in this case, that option is not showing up. What am I missing?
Airport was enabled; however, the network name box did not have an option to "Join Other Network". I was very surprised, because I had used Airport to remotely install the OS in the first place, and that box did have the "Join Other Network" option.
I understand that sniffing tools, used by any network-savvy person, can easily find hidden networks. As a matter of fact, most newer network selection software distributed with network card drivers are able to find and display hidden SSIDs. I just like to use the most security I possibly can, and that's one tool at my disposal. Along with WPA2 and a strong key, the hidden SSID keeps my network out of sight and mind of the casual hacker who just wants to see what's out there to pick and poke at. They're most likely to hack at the easily displayed stuff and, hopefully, ignore what they can't see. Again, just one more tool - not the best, but not totally useless, either. -
Snow Leopard Server combined with Snow Leopard OS
I have a MacPro (4x1 TB Drives, 16GB, RAID Card, 2 x Quad-Core Intel Xeon 2.8 GHz) that has MacOS 10.5 installed (including MS Windows running under VMWare Fusion).
The RAID setup is shown at https://www.radii.org/doc
The computer is used as an everyday workhorse (running OS 10.5.7 on Volume RS1, with Volume R1V2 partitioned into 2 data and file/document stores).
Given the specs of the machine, I plan to setup Snow Leopard Server (Raid 0) also — on a separate partition so that when the system on RS1 freezes, the server does not have to be crashed also.
Is there any advantage in partitioning the volume OSXSERVER to install Snow Leopard Server to perform a number of tasks:
1. provide first level backup and coordinate backup of data to an external/offsite filestore in the clouds for two Microsoft Small Business servers, plus about 5 Mac and Windows desktop machines
2. Provide a mail server
3. iCal server
4. address book server.
The above assumes that I can run both OSs simultaneously — is that possible, or does the system for everyday usage need to be virtualised within the Server OS?? If not, which OS will manage access to the processors?I guess my biggest concern is the frequency with which Mac OSX gets itself tied in knots and a reboot is the only way out of the mess.
I haven't seen that myself, personally. About the only time any of my machines get rebooted is after software update.
Of course, server systems tend to be more focussed than client systems, so that might help too - the server is typically setup, configured and left to do its thing. It's not like you're constantly launching and quitting different applications throughout the day.
However, I know from years of experience with desktop systems in a variety of flavours that they will need to be rebooted at least once a week.
Ahh, there's the Windows-thinking coming through.
I have Mac OS X Server systems that, quite literally, have not been rebooted in years. Most of them have months of uptime. Of course, this means that not all my systems are running the latest OS updates but that's a call I've made.
in general, the smaller the capacity (memory, speed, HD) the more often they need to be rebooted.
Sure, but that's a matter of right-sizing your server for the load you're putting on it.
Again, there's a difference between client and server installations - client systems tend to jump between active processes with minimal background processing, whereas server systems tend to run more focussed tasks.
I have found that software such as MS Office has been highly unreliable in the last couple of years — I still get Excel saying that it 'had to close' sometime in about 10% of the times I am using it.
Right, but you're not running Office on your server, right?
I was hoping there would be a better solution than having to reboot the server — or crash it when the system freezes with a kernal panic brought on by a desktop app
Sure - don't run a desktop app on your server
If you do see that need, then run another virtual machine for your desktop apps. That means you've got one 'master' OS running multiple virtual machines - one per server process, plus another one for desktop/GUI apps.
Or, run all your server processes on a single server with sufficient resource (CPU, disk, memory, etc.) for the tasks you're running, and get an iMac or a Mini for those desktop tasks. Be cheaper that way, anyway. -
I've got Snow Leopard Server, but don't need the server functions. What to do?
This is somewhat complicated, so please bear with me. My Mac Pro was running OS X 10.5 and required updating. But we have legacy Power PC apps (mainly FreeHand) that we want to continue using, even though Mountain Lion doesn't support them.
As a solution, I'm going to run Snow Leopard Server in emulation on Parallels 8 Desktop. I would rather have used plain old Snow Leopard instead of the server version, but Apple's EULA only allows 10.6 Server to run in emulation.
So, I got Snow Leopard Server and have used it to upgrade 10.5. Eventually, (once I get everything working properly), I'll upgrade that to Mountain Lion and use SL Server in Parallels emulation to run the old Mac apps we can't do without.
But I've run into a problem I didn't anticipate: I don't have a clue about running a server.
I'm having trouble setting it up so the other Mac user in my department can access a shared folder. Also, I want the login window to display the list of users, but that option is grayed out.
What I'd like to do is strip out all the server functions and just run as if 10.6.8 was a standard version of Snow Leopard, which I'm familiar with. If that's not practical, please explain how to get sharing to work since that's the main problem.
I've tried turning off the services listed in the Server Preferences (iCal, Mail, etc.) but that hasn't fixed the problems. I think there may be server functions running that I haven't found preventing me from fixing the problems. Or it could be something else entirely (as I said, no clue).DON'T MAKE A MOUNTAIN (lion?) OUT OF A MOLEHILL!
Several points in response to your post, in chronological order, not necessarily in order of importance:
• It was a common Urban Myth that Snow Leopard (client's) EULA prohibited its virtualization in Lion or Mt. Lion on a Mac! That myth has been largely debunked in the last 18 months.
Here are detailed instructions on how to install Snow Leopard client into Parallels 7 or 8:
http://forums.macrumors.com/showthread.php?t=1365439
That being said, and being the author of the aforementioned thread, I STRONGLY recommend that, where possible, you use Snow Leopard Server in favor of Snow Leopard client. This will side step some later corruption problems that can arise from the improper use and shutting down of this Parallels partition.
Historically, this thread was written when Apple sold Snow Leopard Server for $499+ or ceased sales altogether. Now, Apple has rendered the (now diminishing) debate over the EULA moot, by its recent release of Snow Leopard Server to the US & Canadian community for $20; leaving those who cannot purchase SLS (or get someone to purchase it for them) to continue to follow the instructions in my thread (or asking me to purchase SLS for them and forward it to them; my preferred course of action!).
• I ALWAYS recommend that data files be stored on the real Mac's HDs and NOT in a virtualized world. This is easy to accomplish and establishes a backup regimine (Time Machine, etc.) that will protect the users data. Lost applications are easily restored from their installer discs.
• In practice I find that using SLS in Parallels 8 is the same as using SL client in Parallels. I have even removed the Server apps from the Dock so as to not be confused by them.
So, your solution is to establish a "shared folder" on the hard drive of the Mac that is hosting Parallels. When in SLS in Parallels you will have access to your shared folder, ironically through Parallels' "Shared Folders" feature that is now present in Mac OS Guest installs on version 8 (see the "Shared Folders" SERVER on the right side of the screenshot, below).
When using Freehand MX or other PowerPC apps, save your data files into your shared folder through access to it by Parallels' Shared Folders. Other users on your network will have access to the SAME data files, through their customary use of file sharing to access your shared folder from your Mac's hard drive.
IGNORE the Server applications in the Applications folder...
Freehand MX running in Snow Leopard Server installed into Parallels 8 for use in Lion or Mt. Lion:
[click on image to enlarge]
Postscript: your post was so easy to follow! -
Question about changing a Snow Leopard Server network settings
We have an Xserve running Mac OS X Server 10.6.8, the primary services running on it are afp, smb, dhcp, dns, jabber and the calendar sever.
Right now we have a router connecting two networks together, 192.168.0.0/24 and 192.168.1.0/24. The Xserve has a static IP address in the 192.168.0.0/24 range.
In order to combine two phone systems into one I am required to combine the above networks, this will involve removing the router and changing the subnet mask on every device from 255.255.255.0 to 255.255.254.0, any device that is currently part of the 192.168.1.0/24 network will also need to have it's router setting changed from 192.168.1.1 to 192.168.0.1. That part should all be easy.
However, this is my first experience expanding a network past a standard class C and am wondering if there is anything I need to watch for on my Snow Leopard Sever.
Specifically I wonder about dhcp settings, right now there are two dhcp servers, the Xserve which provides dhcp for 192.168.0.0/24 and the router that provides dhcp for 192.168.1.0/24. Once the router is removed the Xserve will need to provide dhcp for the entire network.
Looking at the Xserve dhcp configuration right now I have one subnet defined providing addresses 192.168.0.5 to 192.168.0.125.
Can I simply click the + to add another subnet and add for instance a range of 192.168.1.5 to 192.168.1.125?
Will it simply give out all of the ip addresses in the first range and then start with the 2nd? Or do I need to find a single range of ip addresses large enough to meet my needs? (e.g. 192.168.1.5 to 192.168.1.225 or something).
Is there anythign else to watch for after making this type of network setting change?
Thanks in advance.Thank you for your very detailed reply.
I understand the problems that can arise using 192.168.0.x and 192.168.1.x and if this were a new project I would definitely switch to something else, however in this case we have been using these ip ranges for years (they were in use here long before I started) and I don't want to have to redo all of my dns settings at the same time I make these other changes so I'm going to stick with the same ip's we are using at least for now. Anyone here needing vpn access has already dealt with this issue but we have very few vpn users so it has not been a major problem for us to date.
My biggest question is about increasing the size of the dhcp pool. For instance, after I change all the network settings and set up a /23 network is it possible to have a single dhcp pool that includes some ip's in the 192.168.0.x range and others in the 192.168.1.x range? I guess what I am asking is when I am in Server Admin and click on DHCP one of the tabs across the top is "Subnets". Right now there is a single "subnet" configured that provides addresses from 192.168.0.5 to 192.168.0.125.
Ideally I would like one dhcp pool that provides ip's in the range of 192.168.0.5 to 192.168.0.125 and then if all of those are used up, moves to 192.168.1.5 to 192.168.1.125. Can I do that by simply adding another "Subnet" so there are two? Or do I have to find one larger single range? (e.g. 192.168.1.5 to 192.168.1.225?) You may have already answered this indicating I have to have a single larger range but I just want to be sure.
The parts about changing subnet masks, and routers and all that I think I have a pretty good understanding of.
Your last paragraph is something I have been worried about, I do have a feeling that after making this change there will probably be unforseen issues that will need to be resolved, I'm just hoping it is not too many. For the scope of this thread I will just focus on issues that may arise with the Snow Leopard Server however.
Again, thank you for your help. -
Exchange alternative for Mac Snow Leopard Server
I was wondering what are some good alternatives to Microsoft's Exchange service for use in the new Snow Leopard Server that will be coming out. I am aware that Snow Leopard Server offers open source for mail server, but I would like to go with an actual GUI interface with a third party software. Any suggestions would be great!
You will not be able to do any extensive management of Active Directory from with Mac OS X natively,
and considering the technology, it's best managed using the native Microsoft tools & technologies anyway. There are products that offer options for Mac management from/via AD - beyond what Apple provides and/or is possible by extending your schema, but that's _another matter entirely_.
"Closest thing" is really for you to decide, you will need to investigate the products and if they will meet your needs.
As I have stated, what we know will be available in & via Snow Leopard is what Apple has made known on its own preview pages.
If you needed to seriously know more you would have invested in a ADC Developer account and extensive testing but with the understanding you would be dealing with pre-release technology.
Past that, the two products that offer the most in terms of feature-set(s) are as I already noted:
Kerio
and
Zimbra.
Best of luck ! -
How to sync to Snow Leopard Server wiki group calendar
I'm running the Mac Mini Snow Leopard Server in our law office of 8 attorneys. We all use PC's with Outlook 2010. We don't have Microsoft Exchange Server, and we bought the Snow Leopard Server because of its advertisement that you could achieve the same results on it as on Exchange Server, but without the cost. SOUNDS LIKE-------OH WELL. We want to be able to see everyone's calendar events on 1 calendar if possible. I setup a Group Wiki for the group "Attorneys". When I open that wiki, I've set it to be accessible by all attorneys in the group. When the attorneys accounts were setup in Workgroup Manager, the Attorneys group was also setup, and they have access to the group. I've been trying to figure out how to do this, and the result that seems to come closest is the Wiki Attorneys Group Calendar. I have setup separate calendars in it for each attorney. And so you can see them all on one screen, or deselect and only see the calendars you want. Now the problem is how do I get the existing events off of Outlook 2010 on each machine and into the respective calendars in the Group Wiki, and also update that calendar as events change on each attorney's Outlook calendar? If there is some better way to do this I'm certainly open for suggestions. I don't believe that you can "sync" the iCal client calendar with the Wiki Calendar. If you can that might also be a solution. Thanks.
Not_So wrote:
I went to the AppStore and as I was running Snow Leopard Server it prompted me to purchase Lion Server which I didn't want.
Luckily, I wasn't asked to purchase the 'Server' when I upgraded from SLS to Mountain Lion via the AppStore. I think your particular problem was mentioned in some other posts where the upgrade path to Lion became an infinite loop (hmmm... ). But that's all in the past now. Glad it all worked. -
Updating Snow Leopard Server Software on Dual Intel Mac Mini
I have a 2009 Mac Mini Dual Core 2.53 Intel with 4 gb Ram running as a server under 10.6.8 Max OSX Server.
But I have never used the server capabilities and don't reallyneed them.
The Boss, Wife, wants ITunes radio on it, but it won't work apparently unless you run 10.9.
I tried updating to 10.9 server, but it wouldn't downlaod because the downloader said it needed to run under OSX 10.9.
I am trying to download Mavericks to see if it'll install, but I'm guessing the server level security won't let it.
How can I update to OSX 10.9 Server to basically keep her system as "same" as possible...so ITunes radio will work on it for her?
Is there an easy way other than copy as much as possible to another HD, reformat the entire original Mini HD and start from scratch?
I don't know if I can install another OS on it's second internal HD and just boot up from that one..since I think the server systen may not allow multiple boot drives?
Is there an easy solution to updateing Snow Leopard Server to Mavericks?Help appreciated Greatly.
I downloaded Mavericks with no problem and held my breath to see if it would install OK.
It did.
No major issues and just about everything is working OK right out of the box.
Transition from Snow Leopard Server to OSX Mavericks Single User OS went fine.
Donlt have to worry about archane "Server Language" anymore and administerring this computer will be much easier.
Hope it's a stable build. -
VPN Server in Snow Leopard Server not accepting connections
I've got some issues with a new Snow Leopard Server, running on a Mac mini Server, and VPN.
I have a Linksys WRT310N performing router duties. I have enabled the VPN Passthrough in the router's configuration pages (IPSec, PPTP and L2TP all Enabled). In the Applications and Gaming section, I have enabled ports 1723 (TCP and UDP) and 1701 (TCP and UDP) to go through to the mini Server. In order to have the VPN Passthrough enabled, I have to have the SPI Firewall enabled on the router.
I have both PPTP and L2TP enabled on the Server. When I first tested it, everything worked.
Within 24 hours, it stopped working, and I can't work out why.
On the Server, I can see in the logs the following messages: (server name and IPs changed to protect the guilty)
---BEGIN vpnd.log---
2009-11-03 20:03:32 EST Incoming call... Address given to client = 192.168.0.213
Tue Nov 3 20:03:32 2009 : Directory Services Authentication plugin initialized
Tue Nov 3 20:03:32 2009 : Directory Services Authorization plugin initialized
Tue Nov 3 20:03:32 2009 : PPTP incoming call in progress from '123.456.789.123'...
Tue Nov 3 20:03:33 2009 : PPTP connection established.
Tue Nov 3 20:03:33 2009 : using link 0
Tue Nov 3 20:03:33 2009 : Using interface ppp0
Tue Nov 3 20:03:33 2009 : Connect: ppp0 <--> socket[34:17]
Tue Nov 3 20:03:33 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:33 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:33 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:33 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:36 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:36 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:36 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:36 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:39 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:39 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:39 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:39 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:42 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:42 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:42 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:42 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:45 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:45 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:45 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:45 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:48 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:48 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:48 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:48 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:51 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:51 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:51 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:51 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:54 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:54 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:54 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:54 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:57 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:03:57 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:03:57 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:03:57 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:04:00 2009 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x38278225> <pcomp> <accomp>]
Tue Nov 3 20:04:00 2009 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:04:00 2009 : lcp_reqci: returning CONFACK.
Tue Nov 3 20:04:00 2009 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x4e96b584> <pcomp> <accomp>]
Tue Nov 3 20:04:03 2009 : LCP: timeout sending Config-Requests
Tue Nov 3 20:04:03 2009 : Connection terminated.
Tue Nov 3 20:04:03 2009 : PPTP disconnecting...
Tue Nov 3 20:04:03 2009 : PPTP disconnected
2009-11-03 20:04:03 EST --> Client with address = 192.168.0.213 has hungup
---END vpnd.log---
On the client I'm seeing this in the logs
--- BEGIN ---
3/11/09 8:03:32 PM pppd[12074] pppd 2.4.2 (Apple version 314.0.2) started by root, uid 502
3/11/09 8:03:32 PM pppd[12074] PPTP connecting to server 'server.example.com' (10.0.1.1)...
3/11/09 8:03:33 PM pppd[12074] PPTP connection established.
3/11/09 8:03:33 PM pppd[12074] Connect: ppp0 <--> socket[34:17]
3/11/09 8:04:03 PM pppd[12074] LCP: timeout sending Config-Requests
3/11/09 8:04:03 PM pppd[12074] Connection terminated.
3/11/09 8:04:03 PM pppd[12074] PPTP disconnecting...
3/11/09 8:04:03 PM pppd[12074] PPTP disconnected
3/11/09 8:04:03 PM pppd[12074] PPTP disconnected
3/11/09 8:04:03 PM pppd[12074] PPTP disconnected
--- END ---
Any ideas?Well, this didn't last long. The VPN is already down. Cannot connect to it again.Very Frustrating.
I know the actual server is receiving the requests (Server Log):
Jan 7 10:26:33 SnowServer racoon[118]: Connecting.
Jan 7 10:26:33 SnowServer racoon[118]: IKE Packet: receive success. (Responder, Main-Mode message 1).
Jan 7 10:26:33 SnowServer racoon[118]: IKE Packet: transmit success. (Responder, Main-Mode message 2).
Jan 7 10:26:33 SnowServer racoon[118]: IKE Packet: receive success. (Responder, Main-Mode message 3).
Jan 7 10:26:33 SnowServer racoon[118]: IKE Packet: transmit success. (Responder, Main-Mode message 4).
Jan 7 10:26:36 SnowServer racoon[118]: IKE Packet: transmit success. (Phase1 Retransmit).
Jan 7 10:26:55: --- last message repeated 6 times ---
Jan 7 10:26:55 SnowServer servermgrd[67]: servermgr_jabber[W]: detailed service status not available until network configuration completed
Jan 7 10:26:57 SnowServer racoon[118]: IKE Packet: transmit success. (Phase1 Retransmit).
Jan 7 10:27:03: --- last message repeated 1 time ---
Jan 7 10:27:03 SnowServer racoon[118]: IKEv1 Phase1: maximum retransmits. (Phase1 Maximum Retransmits).
Jan 7 10:27:03 SnowServer racoon[118]: Disconnecting. (Connection tried to negotiate for, 30.655020 seconds).
Jan 7 10:27:03 SnowServer racoon[118]: IKE Phase1 Failure-Rate Statistic. (Failure-Rate = 100.000).
Jan 7 10:27:57 SnowServer racoon[118]: Connecting.
Jan 7 10:27:57 SnowServer racoon[118]: IKE Packet: receive success. (Responder, Main-Mode message 1).
Jan 7 10:27:57 SnowServer racoon[118]: IKE Packet: transmit success. (Responder, Main-Mode message 2).
Jan 7 10:27:58 SnowServer racoon[118]: IKE Packet: receive success. (Responder, Main-Mode message 3).
Jan 7 10:27:58 SnowServer racoon[118]: IKE Packet: transmit success. (Responder, Main-Mode message 4).
Jan 7 10:28:01 SnowServer racoon[118]: IKE Packet: transmit success. (Phase1 Retransmit).
Jan 7 10:28:28: --- last message repeated 8 times ---
Jan 7 10:28:28 SnowServer racoon[118]: IKEv1 Phase1: maximum retransmits. (Phase1 Maximum Retransmits).
Jan 7 10:28:28 SnowServer racoon[118]: Disconnecting. (Connection tried to negotiate for, 30.993122 seconds).
Jan 7 10:28:28 SnowServer racoon[118]: IKE Phase1 Failure-Rate Statistic. (Failure-Rate = 100.000).
But the VPN Server never gets the connection request (VPN Log):
2010-01-07 10:12:13 EST Loading plugin /System/Library/Extensions/L2TP.ppp
2010-01-07 10:12:13 EST Listening for connections...
2010-01-07 10:12:13 EST Listening for connections...
I have a call with Apple Support this afternoon. Hopefully it will be fruitful. If I get anywhere, I will post it. If anyone has any bright ideas, they would be greatly appreciated.
Message was edited by: AeroJet -
Snow Leopard Server Software - Mac Mini Copy vs Retail Copy
Hi All,
I recently purchased a mac mini server, with what I thought would be a SL Server license.
I've used the Mac Mini to run a Leopard server whilst our Xserve was out of action.
Now the xserve is back, I was thinking of installing SL on the Xserve and keep the mini running leopard until we migrate over.
When I tried to install SL on the Xserve, it gave me an error. I rang Apple, and the enterprise guy told me this wasn't possible, as the copy that came with the mac mini was hardware specific and just a restore copy of snow leopard server. Bottom line I can't install the Mac Mini version of SL on an Xserve, even though I have paid for a SL license in buying the mac mini!
Does anybody know if there is any real differences between the hardware specific software copy and a retail version. If there isn't I'll install a copy on the mac mini and copy it over to the xserve. I just want to be sure that I'm not getting a downsized version of software!
Thanks.There are ways to extract the OS from the restore disk so you can use in other system. you will just have to do a little online search. but I think it will be illegal if you care of course... but it would probably be easier to just download a copy from rapidshare or something like that and use your key ..
As far as feature there is none between the restore and retail copy.
Maybe you are looking for
-
How to find out the error in J2EE application without debugging
Hi all, I am trying JCO example for Sales order in Netweaver Development Studio 2.0.3 and JCO 2.1.4. I am using Java class as a object and calling the class in servlet. I am checking one by one method ie systeminfo for getting connection and Salesord
-
My iPad 2 will not allow me to update my apps. When I hit the update button I get a spinning circle but then it times out and doesn't update. In the past when I have updated successfully, the spinning circle would show me an indicator of time left on
-
Add-ons stuck at the beginning of install process
I just updated from Firefox 3.6 to 5.0.1. All of my extensions completely disappeared. I'm trying to reinstall the ones I really need. The three I've tried so far (FireFTP, Web Developer, and Colorzilla) download, start to install, get about 2% into
-
How to know if for a given material / plant / Pur org / vendor a COntract or Schdulign agrremnt exists. (we dont maintain source list some times). Rgds, Mano Sri
-
How do I upgrade two single-app subscriptions to one Creative Cloud membership?
Hi, I have an InDesign and a Photoshop single-app membership but I want Illustrator too. So I was going to upgrade to a Creative Cloud plan - kind of merge the memberships together. The FAQ says to go to My Account and follow the steps but there are