Loading ...
Sorry, an error occurred while loading the content.

Re: Lost connection

Expand Messages
  • Reindl Harald
    ... well, is 213.165.85.151 the IP of a customer? has someone troubles? if not - ignore it because it s mostly some bad guy trying tu misuse your machine and
    Message 1 of 8 , Feb 27, 2013
    • 0 Attachment
      Am 27.02.2013 13:14, schrieb Muzaffer Tolga Özses:
      >
      > On 02/27/2013 02:04 PM, Wietse Venema wrote:
      >> egrep '(warning|error|fatal|panic):
      >
      > Unfortunately, all I get was these and similar, and the most recent one is from 2 days ago.
      >
      > egrep '(warning|error|fatal|panic):' /var/log/mail.log | head
      > Feb 25 01:56:26 server postfix/smtpd[10324]: warning: s15313432.onlinehome-server.info[213.165.85.151]: SASL LOGIN
      > authentication failed: UGFzc3dvcmQ6
      > Feb 25 01:56:28 server postfix/smtpd[10353]: warning: s15313432.onlinehome-server.info[213.165.85.151]: SASL LOGIN
      > authentication failed: UGFzc3dvcmQ6

      well, is 213.165.85.151 the IP of a customer?
      has someone troubles?

      if not - ignore it because it's mostly some bad guy trying
      tu misuse your machine and looking at the short interval
      it seems that it is the case
    • Simon Brereton
      ... UGFzc3dvcmQ6 is the hash for password. I have hundred of attempts like this on a daily basis. But as Wietse will point out, this is not his problem. Simon
      Message 2 of 8 , Feb 27, 2013
      • 0 Attachment
        On 27 February 2013 13:16, Reindl Harald <h.reindl@...> wrote:
        >
        >
        > Am 27.02.2013 13:14, schrieb Muzaffer Tolga Özses:
        >>
        >> On 02/27/2013 02:04 PM, Wietse Venema wrote:
        >>> egrep '(warning|error|fatal|panic):
        >>
        >> Unfortunately, all I get was these and similar, and the most recent one is from 2 days ago.
        >>
        >> egrep '(warning|error|fatal|panic):' /var/log/mail.log | head
        >> Feb 25 01:56:26 server postfix/smtpd[10324]: warning: s15313432.onlinehome-server.info[213.165.85.151]: SASL LOGIN
        >> authentication failed: UGFzc3dvcmQ6
        >> Feb 25 01:56:28 server postfix/smtpd[10353]: warning: s15313432.onlinehome-server.info[213.165.85.151]: SASL LOGIN
        >> authentication failed: UGFzc3dvcmQ6
        >
        > well, is 213.165.85.151 the IP of a customer?
        > has someone troubles?
        >
        > if not - ignore it because it's mostly some bad guy trying
        > tu misuse your machine and looking at the short interval
        > it seems that it is the case
        >

        UGFzc3dvcmQ6 is the hash for password. I have hundred of attempts
        like this on a daily basis.

        But as Wietse will point out, this is not his problem.

        Simon
      • Wietse Venema
        ... You have a service on 127.0.0.1 port 10024 that isn t receiving mail as it should. If that is not a Postfix service, then my trouble shooting egrep pattern
        Message 3 of 8 , Feb 27, 2013
        • 0 Attachment
          Wietse Venema:
          > > and restarted postfix. However, I'm now getting "(connect to
          > > 127.0.0.1[127.0.0.1]:10024: Connection refused)". I did a grep in the
          > > logs and the output was "Feb 27 09:48:17 server postfix/smtp[11674]:
          > > 3C361768793: to=<tolga@...>, relay=127.0.0.1[127.0.0.1]:10024,
          > > delay=0.04, delays=0.03/0.01/0/0, dsn=4.4.2, status=deferred (lost
          > > connection with 127.0.0.1[127.0.0.1] while receiving the initial server
          > > greeting)"

          You have a service on 127.0.0.1 port 10024 that isn't receiving
          mail as it should. If that is not a Postfix service, then my
          trouble shooting egrep pattern will not apply.

          Wietse
        • Muzaffer Tolga Özses
          ... I had stopped amavis while trying to debug. I now started it again, and now I am getting Feb 27 16:13:51 server postfix/smtp[18445]: 71D347687A4:
          Message 4 of 8 , Feb 27, 2013
          • 0 Attachment
            On 02/27/2013 04:04 PM, Wietse Venema wrote:
            > Wietse Venema:
            >>> and restarted postfix. However, I'm now getting "(connect to
            >>> 127.0.0.1[127.0.0.1]:10024: Connection refused)". I did a grep in the
            >>> logs and the output was "Feb 27 09:48:17 server postfix/smtp[11674]:
            >>> 3C361768793: to=<tolga@...>, relay=127.0.0.1[127.0.0.1]:10024,
            >>> delay=0.04, delays=0.03/0.01/0/0, dsn=4.4.2, status=deferred (lost
            >>> connection with 127.0.0.1[127.0.0.1] while receiving the initial server
            >>> greeting)"
            > You have a service on 127.0.0.1 port 10024 that isn't receiving
            > mail as it should. If that is not a Postfix service, then my
            > trouble shooting egrep pattern will not apply.
            >
            > Wietse
            I had stopped amavis while trying to debug. I now started it again, and
            now I am getting
            "Feb 27 16:13:51 server postfix/smtp[18445]: 71D347687A4:
            to=<tolga@...>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.02,
            delays=0/0.01/0.01/0, dsn=4.4.2, status=deferred (lost connection with
            127.0.0.1[127.0.0.1] while receiving the initial server greeting)"

            M.
          • Wietse Venema
            ... Apparently, Amavis isn t receiving mail as it should. That is outside my area of support. Wietse
            Message 5 of 8 , Feb 27, 2013
            • 0 Attachment
              Wietse:
              > You have a service on 127.0.0.1 port 10024 that isn't receiving
              > mail as it should. If that is not a Postfix service, then my
              > trouble shooting egrep pattern will not apply.

              Muzaffer Tolga ?zses:
              > I had stopped amavis while trying to debug. I now started it again, and
              > now I am getting
              > "Feb 27 16:13:51 server postfix/smtp[18445]: 71D347687A4:
              > to=<tolga@...>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.02,
              > delays=0/0.01/0.01/0, dsn=4.4.2, status=deferred (lost connection with
              > 127.0.0.1[127.0.0.1] while receiving the initial server greeting)"

              Apparently, Amavis isn't receiving mail as it should. That is outside
              my area of support.

              Wietse
            Your message has been successfully submitted and would be delivered to recipients shortly.