Forum Moderators: phranque

Message Too Old, No Replies

maillog problems?

where are these coming from

         

adwhite

10:11 pm on Jun 28, 2005 (gmt 0)

10+ Year Member



Hi,

I've been checking my maillog and I'm getting a load of entries that shouldn't be there. Like :-

Jun 28 22:58:05 ns sendmail[32473]: j5P4Kna26176: to=makeapenny@example.net, ctladdr=httpd (15/11), delay=3+17:37:16, xdelay=00:00:01, mailer=esmtp, pri=8047531, relay=example.net, [204.***.**.***], dsn=4.0.0, stat=Deferred: Connection refused by example.net.
Jun 28 22:58:05 ns sendmail[32473]: j5P4Gw325127: to=flar@example.com, ctladdr=httpd (15/11), delay=3+17:41:07, xdelay=00:00:00, mailer=esmtp, pri=8047532, relay=example.com. [66.***.***.**], dsn=4.0.0, stat=Deferred: Connection refused by example.com.

There is no "from" so how are these getting there and does anyone know how can I stop them?

Cheers

Andy

[edited by: tedster at 11:00 pm (utc) on June 28, 2005]
[edit reason] make information anonymous [/edit]

dcrombie

11:58 am on Jun 29, 2005 (gmt 0)



The 'From' will be on another line. Try grepping for "j5P4Kna26176" in the logfile.

adwhite

11:30 am on Jun 30, 2005 (gmt 0)

10+ Year Member



Hi,

No there is no "from" at least not in the log for the last week.

dcrombie

11:49 am on Jun 30, 2005 (gmt 0)



It could be up to 3 days (or more) in the past, but it will be there. At some point the message was generated, and assigned a unique id: j5P4Kna26176 and j5P4Gw325127 for the ones you're looking at. That same id is then used every time the mail server tries to send the message until it gives up.