On Sun, Jul 31, 2005 at 02:42:53PM +0200, Steffen Heil said:
> Hi
>
> I just read my logs and found something strange:
>
> 2005-07-31 09:34:19 ignoring AUTH=www000@??? from
> H=www1.spektrum.de [194.175.173.101] (client not authenticated)
>
> greping over my logs, I found more such entries. about 500, 250 of which
> were from spektrum.de alone.
> So, what does this mean?
>
> The server sent
> AUTH www000@???
>
> and so corresponding
> PASS ...
They have broken mail software or are trying to relay through your
machine. Exim properly ignores it. Life on the internet.
--
--------------------------------------------------------------------------
| Stephen Gran | If I pull this SWITCH I'll be RITA |
| steve@??? | HAYWORTH!! Or a SCIENTOLOGIST! |
| http://www.lobefin.net/~steve | |
--------------------------------------------------------------------------