Pegasus
18/06/07, 12:22
1 van onze servers wordt constant bestookt met een bepaalde lookup, in de exim mainlog komt dan het volgende te staan:
2007-06-18 12:11:34 1HzAlg-0006ID-KL == mandychrisryan@yahoo.com R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host f.mx.mail.yahoo.com [68.142.202.247]: 451 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8) 194.126.173.56
2007-06-18 12:11:34 1HzAlg-0006ID-KL == ashlee191@yahoo.com R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host f.mx.mail.yahoo.com [68.142.202.247]: 451 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8) 194.126.173.56
2007-06-18 12:11:34 1HzAlg-0006ID-KL == dcmeddude@yahoo.com R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host f.mx.mail.yahoo.com [68.142.202.247]: 451 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8) 194.126.173.56
2007-06-18 12:11:34 1HzAlg-0006ID-KL == cmy44@yahoo.com R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host f.mx.mail.yahoo.com [68.142.202.247]: 451 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8) 194.126.173.56
2007-06-18 12:11:34 1HzAlg-0006ID-KL == josh_hicks10@yahoo.com R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host f.mx.mail.yahoo.com [68.142.202.247]: 451 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8) 194.126.173.56
Waardoor de systemload enorm hoog wordt:
top - 12:18:21 up 1 day, 2 min, 1 user, load average: 11.11, 10.70, 9.40
---
21802 named 16 0 41732 4904 1188 S 39.3 0.5 144:17.47 named
18988 root 19 0 11108 2992 2080 R 10.0 0.3 0:00.44 exim
18989 root 19 0 9976 2964 2076 R 9.0 0.3 0:00.43 exim
18986 root 19 0 11436 2988 2104 R 6.7 0.3 0:00.39 exim
18987 root 19 0 10796 2956 2080 R 6.7 0.3 0:00.39 exim
18952 root 22 0 10356 2992 2076 R 6.3 0.3 0:00.49 exim
18962 root 18 0 10836 3032 2108 S 5.7 0.3 0:00.46 exim
Wat ik nu doe is constant het IPadres bannen, echter schiet ik hier niks mee op omdat er telkens weer een ander IPadres is en ik geen connectie meer kan maken met de betreffende mailserver van yahoo. Heb ook al gekeken naar de melding, echter is deze mailserver geen open relay.
Directadmin
Exim 4.64
Iemand een idee? Iemand vaker last gehad van deze Yahoo messages? Ik kan ook geen oplossing vinden op de pagina in die url.
Alvast enorm bedankt!
EDIT:
Ook draait Mailscanner mee, misschien is dit van belang.
2007-06-18 12:11:34 1HzAlg-0006ID-KL == mandychrisryan@yahoo.com R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host f.mx.mail.yahoo.com [68.142.202.247]: 451 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8) 194.126.173.56
2007-06-18 12:11:34 1HzAlg-0006ID-KL == ashlee191@yahoo.com R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host f.mx.mail.yahoo.com [68.142.202.247]: 451 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8) 194.126.173.56
2007-06-18 12:11:34 1HzAlg-0006ID-KL == dcmeddude@yahoo.com R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host f.mx.mail.yahoo.com [68.142.202.247]: 451 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8) 194.126.173.56
2007-06-18 12:11:34 1HzAlg-0006ID-KL == cmy44@yahoo.com R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host f.mx.mail.yahoo.com [68.142.202.247]: 451 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8) 194.126.173.56
2007-06-18 12:11:34 1HzAlg-0006ID-KL == josh_hicks10@yahoo.com R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host f.mx.mail.yahoo.com [68.142.202.247]: 451 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8) 194.126.173.56
Waardoor de systemload enorm hoog wordt:
top - 12:18:21 up 1 day, 2 min, 1 user, load average: 11.11, 10.70, 9.40
---
21802 named 16 0 41732 4904 1188 S 39.3 0.5 144:17.47 named
18988 root 19 0 11108 2992 2080 R 10.0 0.3 0:00.44 exim
18989 root 19 0 9976 2964 2076 R 9.0 0.3 0:00.43 exim
18986 root 19 0 11436 2988 2104 R 6.7 0.3 0:00.39 exim
18987 root 19 0 10796 2956 2080 R 6.7 0.3 0:00.39 exim
18952 root 22 0 10356 2992 2076 R 6.3 0.3 0:00.49 exim
18962 root 18 0 10836 3032 2108 S 5.7 0.3 0:00.46 exim
Wat ik nu doe is constant het IPadres bannen, echter schiet ik hier niks mee op omdat er telkens weer een ander IPadres is en ik geen connectie meer kan maken met de betreffende mailserver van yahoo. Heb ook al gekeken naar de melding, echter is deze mailserver geen open relay.
Directadmin
Exim 4.64
Iemand een idee? Iemand vaker last gehad van deze Yahoo messages? Ik kan ook geen oplossing vinden op de pagina in die url.
Alvast enorm bedankt!
EDIT:
Ook draait Mailscanner mee, misschien is dit van belang.