Re: [exim] Repeating log entries but no traffic

Andreas Pettersson wrote:
> I get these log entries each and every minute since about a week ago,
> but when I run 'tcpdump host 62.65.23.248' I see absolutely no traffic!
>
> What's going on? How can I stop it?
>
> 2006-10-14 17:16:33 host name alias list truncated for 62.65.23.248
> 2006-10-14 17:16:33 no IP address found for host
> mail.xn--g-ner-i-vikt-tcb.se (during SMTP connection from [62.65.23.248])
> 2006-10-14 17:16:33 no IP address found for host mail.atg.nu (during
> SMTP connection from [62.65.23.248])
> 2006-10-14 17:16:33 no IP address found for host mail.mh2e.com (during
> SMTP connection from [62.65.23.248])
> 2006-10-14 17:16:33 no IP address found for host mail.unit.nu (during
> SMTP connection from [62.65.23.248])
> 2006-10-14 17:16:34 no IP address found for host mail.donum.se (during
> SMTP connection from [62.65.23.248])
>

Try this from the CLI:

host -v 62.65.23.248 > weird

more (or less) weird

The return I get - a cname and 205 PTR records, in addition to the usual
informative overhead - is the reason I suggested piping to a file.

Now do:

whois 62.65.23.248

Find "ASSIGNED PA"

Rest is up to you, but my reaction was:

ipfw add 00666 deny ip from 62.65.0.0/19 to any

;-)

Bill