Re: [cobalt-users] Help interpreting message in /var/log/maillog

[flash22@xxxxxxx]

On Thu, 15 Feb 2001, Michael Schumacher wrote:

> Can someone please tell me what the following message means. This error has
> been appearing every few minutes for the last couple days. Is someone trying
> to relay spam through my server? How do I make this go away?
> 
> Feb 15 11:36:12 www sendmail[3878]: LAA03878: from=<larry@xxxxxxxxxxxxxxx>,
> size=0, class=0, pri=0, nrcpts=0, proto=ESMTP, relay=[63.164.34.195]
> Feb 15 11:37:32 www sendmail[3909]: LAA03909: ruleset=check_mail,
> arg1=<larry@xxxxxxxxxxxxxxx>, relay=[63.164.34.195], reject=451
> <larry@xxxxxxxxxxxxxxx>... Sender domain must resolve
> 

Possibly, however it isn't listed as a spam source or open relay, looks
like their DNS is totally horrible screwed up tho..

To make it go away just add that IP to 'deny email from these hosts.] in
control panel under email....

You could send an email to the admin iof the nameserver , but they seem to
have no clue how to set that either (root@localhost) duh

Hmm, the physical contact is a company in Las Vegas, i have found this is
often a bad sign -/ (spam)

 
   Administrative Contact, Technical Contact, Billing Contact:
      Ferrara, John  (JF273)  johnf@xxxxxxxxx
      Allied National Network Co. Inc,
      537 E Sahara Avenue, Suite 202
      Las Vegas, NV 89104
      702-796-0606 FAX 702-796-8765 FAX 702-656-2793

Provides nameserce for steelman-js.com which has no real SOA ;)