Author: Andreas Pettersson Date: To: exim users Subject: Re: [exim] Repeating log entries but no traffic
Andreas Pettersson wrote:
>I get these log entries each and every minute since about a week ago,
>but when I run 'tcpdump host 62.65.23.248' I see absolutely no traffic!
>
>What's going on? How can I stop it?
>
>2006-10-14 17:16:33 host name alias list truncated for 62.65.23.248
>2006-10-14 17:16:33 no IP address found for host
>mail.xn--g-ner-i-vikt-tcb.se (during SMTP connection from [62.65.23.248])
>2006-10-14 17:16:33 no IP address found for host mail.atg.nu (during
>SMTP connection from [62.65.23.248])
>2006-10-14 17:16:33 no IP address found for host mail.mh2e.com (during
>SMTP connection from [62.65.23.248])
>2006-10-14 17:16:33 no IP address found for host mail.unit.nu (during
>SMTP connection from [62.65.23.248])
>2006-10-14 17:16:34 no IP address found for host mail.donum.se (during
>SMTP connection from [62.65.23.248])
>
>
Having tcpdump running a bit longer actually catched some packets
eventually.
I tried blocking smtp syn from 62.65.23.248 and it had no immediate
effect in the logs. I suspect there were some open connections maybe.
But after waiting a few minutes it seems 'work'. God, I just hate
imbecill mail servers..
