Autor: Sławomir Dworaczek
Data:
Dla: exim-users
Temat: [exim] Log problem - what is log part ? attack ?
Hello
The log in Exim, I received some strange news
no IP address found for host smarthost.win.pl (during SMTP connection
xxx.xxx.xxx
It comes up with all e-mail coming from the outside.
2015-10-08 00:52:14 no IP address found for host smarthost.win.pl (during
SMTP connection from 66-220-155-136.outmail.facebook.com
(mx-out.facebook.com) [66.220.155.136])
2015-10-08 00:52:14 1ZjxZG-0001Jk-7v DKIM: d=facebookmail.com
s=s1024-2013-q3 c=relaxed/simple a=rsa-sha256 t=1444256974 [verification
succeeded]
2015-10-08 00:52:14 1ZjxZG-0001Jk-7v <=
notification+kjdm75-dp3-m@???
H=66-220-155-136.outmail.facebook.com (mx-out.facebook.com) [66.220.155.136]
P=esmtp S=8933 id=794518beb5$
2015-10-08 00:52:15 1ZjxZG-0001Jr-K7 <=
notification+kjdm75-dp3-m@??? U=exim P=bogodone S=9220
id=794518beb59e9298de50ed47cb4f2c39@???
2015-10-08 00:52:15 1ZjxZG-0001Jr-K7 => myuser <myuser@???>
R=localuser T=local_delivery
2015-10-08 00:52:15 1ZjxZG-0001Jr-K7 Completed
2015-10-08 01:46:38 no IP address found for host smarthost.win.pl (during
SMTP connection from mx3.mf.gov.pl (cobzas-pr-ia-9-ft2-spam.mf.gov.pl)
[145.237.192.4])
2015-10-08 01:46:38 no IP address found for host smarthost.win.pl (during
SMTP connection from mx3.mf.gov.pl (cobzas-pr-ia-9-ft2-spam.mf.gov.pl)
[145.237.192.4])
2015-10-08 01:46:38 1ZjyPu-0001tr-LT <= us2420vatref@???
H=mx3.mf.gov.pl (cobzas-pr-ia-9-ft2-spam.mf.gov.pl) [145.237.192.4] P=esmtps
X=TLSv1:DHE-RSA-AES256-SHA:256 CV=no S=23$
2015-10-08 01:46:39 1ZjyPu-0001ty-Vq <= us2420vatref@??? U=exim
P=bogodone S=237596
id=475053812.102741444261592745.JavaMail.csiapp@???
2015-10-08 01:46:39 1ZjyPu-0001ty-Vq => myuser1 <myuser1@???>
R=localuser T=local_delivery
2015-10-08 01:46:39 1ZjyPu-0001ty-Vq Completed
Regards
Slawek