sslug-teknik team mailing list archive

[Kim Schulz <kim@xxxxxxxxx>]

hejsa
Vi har lige haft en server der nær blev lagt i knæ pga. syslogd og
MailScanner der blev bombet med nogle underlige requests.
Mailloggen er på under en time vokset med 25mb og den vokser ganske
hurtigt. 
loggen ser f.eks. således ud:


Jun 27 23:56:48 ns2 sendmail[31759]: XAA31759:
from=<ispdirect020@xxxxxxxxx>, size=340, class=0, pri=120340, nrcpts=4,
msgid=<080076058056049046049057046050051052046057058052058056056056056@
81.19.234.9>, proto=SMTP, relay=www.hadenfeldt.dk [81.19.234.2]
Jun 27 23:56:48 ns2 sendmail[31759]: XAA31759: to=<stratton@xxxxxxxxx>,
delay=00:00:01, mailer=esmtp, stat=queued
Jun 27 23:56:48 ns2 sendmail[31759]: XAA31759: to=<b0808@xxxxxxxx>,
delay=00:00:01, mailer=esmtp, stat=queued
Jun 27 23:56:48 ns2 sendmail[31759]: XAA31759: to=<ppttt@xxxxxxxxxx>,
delay=00:00:01, mailer=esmtp, stat=queued
Jun 27 23:56:48 ns2 sendmail[31759]: XAA31759:
to=<pxyacct@xxxxxxxxxxxx>, delay=00:00:01, mailer=esmtp, stat=queued
Jun 27 23:56:48 ns2 sendmail[31761]: XAA31761: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "250
<b0808@xxxxxxxx>... Recipient ok": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31759]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "250 XAA31759
Message accepted for delivery": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "503 Need MAIL
before RCPT": Broken pipe
Jun 27 23:56:48 ns2 last message repeated 3 times
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "503 Need MAIL
command": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "Message-ID:
<080076058056049046049057046050051052046057058052058056056056056@81.19.
234.9>"": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "To: <Undisclosed Recipients>"": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "From:ispdirect020@xxxxxxxxx"": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "Subject: tpyt"": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "Date: Thu, 27 Jun 2002 11:01:58 00100"": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "MIME-Version: 1.0"": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "Content-Type: text/plain;"": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "^Icharset="Windows-1252""": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "Content-Transfer-Encoding: 7bit"": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: """: Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "056049046049057046050051052046050053050"": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31758]: NOQUEUE: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "500 Command
unrecognized: "."": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31761]: XAA31761: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "250
<ppttt@xxxxxxxxxx>... Recipient ok": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31761]: XAA31761: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "250
<pxyacct@xxxxxxxxxxxx>... Recipient ok": Broken pipe
Jun 27 23:56:48 ns2 sendmail[31761]: XAA31761: SYSERR: putoutmsg
(www.hadenfeldt.dk): error on output channel sending "354 Enter mail,
end with "." on a line by itself": Broken pipe


Nogen der ved hvad pokker dette er? 




-- 
Navn  : Kim Schulz      | In any formula, constants (especially those
Email : kim @ schulz.dk | obtained from handbooks) are to be treated as
WWW   : www.schulz.dk   | variables.