Quoting "Odhiambo G. Washington" <wash@???>:
> Hello users,
>
> I do see a significant number of the following log info in the mainlog
> of my primary server:
>
> 2004-01-12 15:05:33 H=longonot.wananchi.com [62.8.64.2] incomplete
> transaction (QUIT) from <> for XXXX@???
>
>
> 62.8.64.2 is my backup mx.
> What would you consider the likely cause of this behaviour?
>
I have seen such logging being caused by systems or scripts that check if a
port is open on a remote host. They just connect and if it's open, they quit
without completing the SMTP session. The difference with this one is it sends
the MAIL FROM and RCPT TO commands. Can't think of a reason at the moment.
Just mentioned this in case there's something like that running from your
backup MX (which might be running some monitoring scripts).
What do the logs from your backup MX say. This might be too far fetched but
consider firewalling all hosts except the backup MX and run this mailhost in
debug mode.
HTH
Kiri
-------------------------------------------------
This message was sent using M-Web Airmail.
http://www.mweb.co.zw/airmail
