Re: [cobalt-users] relay testing???

[David Lucas <david@xxxxxxxxxxxxxxxx>]

At 02:25 PM 5/21/2002, you wrote:

> =-=-=-=-=-=-=-=-=-=
> May 21 14:10:43 fsn3 sendmail[2148]: g4LIAhF02148: ruleset=check_rcpt,
> Periodically I get the following error messages, from a domain on my servers,
> the domain is always a different one. Is this some kind of a spam test.
> (example.com)
>
>
> May 21 14:10:43 fsn3 sendmail[2148]: g4LIAhF02148: ruleset=check_rcpt,
> arg1=<postmaster@xxxxxxxxxxx>, relay=123-58-189-66.wo.cpe.charter-ne.com
> [66.189.58.123], reject=550 5.7.1 <postmaster@xxxxxxxxxxx>... Relaying
> denied.  Please check your mail first.
>
> May 21 14:10:43 fsn3 sendmail[2148]: g4LIAhF02148: ruleset=check_rcpt,
> arg1=<abuse@xxxxxxxxxxx>, relay=123-58-189-66.wo.cpe.charter-ne.com
> [66.189.58.123], reject=550 5.7.1 <abuse@xxxxxxxxxxx>... Relaying denied.
> Please check your mail first.
>
> May 21 14:10:43 fsn3 sendmail[2148]: g4LIAhF02148: ruleset=check_rcpt,
> arg1=<tested.from.38.211.127.210@xxxxxxxxxxx>,
> relay=123-58-189-66.wo.cpe.charter-ne.com [66.189.58.123], reject=550 5.7.1
> <tested.from.38.211.127.210@xxxxxxxxxxx>... Relaying denied.  Please check
> your mail first.
>
> --

You get a bunch of junk like this if the person at the charter-ne.com ip 
address is infected with the Klez virus.  I get a number from 
shawcable.com, comcast.net, dsl-verizon.net and aol.com.  Shawcable has 
been responsive as has been dccnet.com.  Some of the other ISP's aren't too 
helpful with their customers that have infected computers.