Re: [cobalt-users] Relay - to be or not to be

[flash22@xxxxxxx]

On Tue, 21 May 2002, Danny Daniels wrote:

> This has been appearing in /var/log/maillog
> I noticed it a couple of times. The first line seems to denote the mail was
> rejected but then line two seems like it was relayed ?
> I am reading this wrong ?
> 
> 
> May 21 06:09:40 cobalt sendmail[23939]: g4LD9ep23939: ruleset=check_mail,
> arg1=<root@localhost>, relay=[212.17.31.241], reject=553 5.5.4
> <root@localhost>... Real domain name required
> May 21 06:09:40 cobalt sendmail[23939]: g4LD9ep23939: from=<root@localhost>,
> size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[212.17.31.241]
> 

nrcpts = number of recipients, since there were '0' recipients, no mail
went anywhere, sendmail is just tidying up 

The fact that someone from outside is trying to claim to be from
'localhost' implies shenanigans, probably a relay test , or soemone trying
to spam....

In case you're wondering...

inetnum:      212.17.0.0 - 212.17.31.255
address:      Magistral Telecom JV.
address:      901, 12 Lenin St.
address:      630099 Novosibirsk
address:      Siberia
address:      RUSSIA

Know anyone in siberia? lol

gsh