Re: [exim] strange AUTHs in logs

Top Page
Delete this message
Reply to this message
Author: Stephen Gran
Date:  
To: exim-users
Subject: Re: [exim] strange AUTHs in logs
On Sun, Jul 31, 2005 at 02:42:53PM +0200, Steffen Heil said:
> Hi
>
> I just read my logs and found something strange:
>
> 2005-07-31 09:34:19 ignoring AUTH=www000@??? from
> H=www1.spektrum.de [194.175.173.101] (client not authenticated)
>
> greping over my logs, I found more such entries. about 500, 250 of which
> were from spektrum.de alone.
> So, what does this mean?
>
> The server sent
> AUTH www000@???
>
> and so corresponding
> PASS ...


They have broken mail software or are trying to relay through your
machine. Exim properly ignores it. Life on the internet.
--
--------------------------------------------------------------------------
|  Stephen Gran                  | If I pull this SWITCH I'll be RITA      |
|  steve@???             | HAYWORTH!!  Or a SCIENTOLOGIST!         |
|  http://www.lobefin.net/~steve |                                         |

--------------------------------------------------------------------------