[TriLUG] Sendmail errors

William Schulz sws at trilug.org
Sat Mar 22 13:03:16 EST 2003


On Sat, Mar 22, 2003 at 12:16:27PM -0500, Joseph Tate wrote:
> I'm getting the following in my logs daily, and with increasing 
> regularity.  Is this something to be concerned about?  I'm almost 
> positive it's spammers trying to find an open relay to use:
> 
> NOQUEUE: [61.185.93.45] did not issue MAIL/EXPN/VRFY/ETRN during 
> connection to MTA
> NOQUEUE: 112.Red-80-35-91.pooles.rima-tde.net [80.35.91.112] did not 
> issue MAIL/EXPN/VRFY/ETRN during connection to MTA
> NOQUEUE: adsl-068-153-179-091.sip.mia.bellsouth.net [68.153.179.91] did 
> not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
> NOQUEUE: [218.70.153.112] did not issue MAIL/EXPN/VRFY/ETRN during 
> connection to MTA
> 
> What does this message really mean?

It means they connected to port 25 but did not follow through with the
usual got-some-mail-for-ya routine.  Typically, this is the result of a
simple port scan and unless you have other data in FW or other logs,
isn't too much to be concerned with.

If you 'telnet localhost 25' and then close the connection without
additional input, you should see the same message in your log.

SWS




More information about the TriLUG mailing list