[exim] unexplained SMTP connection

Top Page
Delete this message
Reply to this message
Author: list2
Date:  
To: exim-users
Old-Topics: [exim] Hacky milter for exim
Subject: [exim] unexplained SMTP connection
Hello list!

Could somebody tell me what is going on based on the cross section of
log below? Is something stuck in my customer's outbox? It doesn't
actually send out anything yet the rate quota is engaged. I can't block
the IP as it is a legit wi-fi for an officefull of Macs that uses this
email server. This goes on and on and on in my log. How can I stop it?

My rate section in my config looks like this:

   warn ratelimit         = 100 / 1h / strict
      log_message         = Sender rate $sender_rate / $sender_rate_period






2012-09-28 18:39:53 [24427] SMTP connection from [75.71.106.148]:36512
I=[216.240.133.65]:587 (TCP/IP connection count = 1)
2012-09-28 18:39:53 [24593] H=([10.0.1.11]) [75.71.106.148]:36512
I=[216.240.133.65]:587 Warning: Sender rate 283.0 / 1h
2012-09-28 18:39:53 [24593] H=([10.0.1.11]) [75.71.106.148]:36512
I=[216.240.133.65]:587 Warning: Sender rate 284.0 / 1h
2012-09-28 18:39:53 [24593] plain_login authenticator failed for
([10.0.1.11]) [75.71.106.148]:36512 I=[216.240.133.65]:587: 535
Incorrect authentication data
2012-09-28 18:39:53 [24593] SMTP connection from ([10.0.1.11])
[75.71.106.148]:36512 I=[216.240.133.65]:587 lost
2012-09-28 18:39:53 [24593] no MAIL in SMTP connection from
([10.0.1.11]) [75.71.106.148]:36512 I=[216.240.133.65]:587 D=0s
C=EHLO,STARTTLS,EHLO,AUTH
2012-09-28 18:39:54 [24427] SMTP connection from [75.71.106.148]:34435
I=[216.240.133.65]:587 (TCP/IP connection count = 1)
2012-09-28 18:39:54 [24595] H=([10.0.1.11]) [75.71.106.148]:34435
I=[216.240.133.65]:587 Warning: Sender rate 284.9 / 1h
2012-09-28 18:39:55 [24595] H=([10.0.1.11]) [75.71.106.148]:34435
I=[216.240.133.65]:587 Warning: Sender rate 285.9 / 1h
2012-09-28 18:39:55 [24595] plain_login authenticator failed for
([10.0.1.11]) [75.71.106.148]:34435 I=[216.240.133.65]:587: 535
Incorrect authentication data
2012-09-28 18:39:55 [24595] SMTP connection from ([10.0.1.11])
[75.71.106.148]:34435 I=[216.240.133.65]:587 lost
2012-09-28 18:39:55 [24595] no MAIL in SMTP connection from
([10.0.1.11]) [75.71.106.148]:34435 I=[216.240.133.65]:587 D=1s
C=EHLO,STARTTLS,EHLO,AUTH
2012-09-28 18:39:55 [24427] SMTP connection from [75.71.106.148]:41928
I=[216.240.133.65]:587 (TCP/IP connection count = 1)
2012-09-28 18:39:55 [24599] H=([10.0.1.11]) [75.71.106.148]:41928
I=[216.240.133.65]:587 Warning: Sender rate 286.8 / 1h
2012-09-28 18:39:56 [24599] H=([10.0.1.11]) [75.71.106.148]:41928
I=[216.240.133.65]:587 Warning: Sender rate 287.8 / 1h
2012-09-28 18:39:56 [24599] plain_login authenticator failed for
([10.0.1.11]) [75.71.106.148]:41928 I=[216.240.133.65]:587: 535
Incorrect authentication data
2012-09-28 18:39:56 [24599] SMTP connection from ([10.0.1.11])
[75.71.106.148]:41928 I=[216.240.133.65]:587 lost
2012-09-28 18:39:56 [24599] no MAIL in SMTP connection from
([10.0.1.11]) [75.71.106.148]:41928 I=[216.240.133.65]:587 D=1s
C=EHLO,STARTTLS,EHLO,AUTH
2012-09-28 18:39:57 [24427] SMTP connection from [75.71.106.148]:40429
I=[216.240.133.65]:587 (TCP/IP connection count = 1)