Frage zum Log

Slowman

New Member
Mal nur die doofe Frage von mir, da ich mich mit dem Log mail noch nicht so auskenne. Hier fand nur der Versuch statt und mehr nicht ?
Traffic ist nicht erhöht gewesen für smtp.
Denke mal nicht, aber man weiss ja nie. :rolleyes:

PHP:
Feb  4 23:20:46 h1162492 postfix/smtpd[7574]: connect from ipx10275.ipxserver.de[80.190.243.165]
Feb  4 23:20:46 h1162492 postfix/smtpd[7574]: lost connection after CONNECT from ipx10275.ipxserver.de[80.190.243.165]
Feb  4 23:20:46 h1162492 postfix/smtpd[7574]: disconnect from ipx10275.ipxserver.de[80.190.243.165]
Feb  4 23:26:25 h1162492 imaplogin: Connection, ip=[::ffff:69.90.49.18]
Feb  4 23:26:25 h1162492 imaplogin: DISCONNECTED, ip=[::ffff:69.90.49.18], time=0
Feb  4 23:50:32 h1162492 imaplogin: Connection, ip=[::ffff:82.165.176.132]
Feb  4 23:50:32 h1162492 imaplogin: DISCONNECTED, ip=[::ffff:82.165.176.132], time=0
Feb  5 00:01:07 h1162492 imaplogin: Connection, ip=[::ffff:70.84.93.210]
Feb  5 00:01:08 h1162492 imaplogin: DISCONNECTED, ip=[::ffff:70.84.93.210], time=1
Feb  5 00:06:48 h1162492 imaplogin: Connection, ip=[::ffff:82.165.176.132]
Feb  5 00:06:48 h1162492 imaplogin: DISCONNECTED, ip=[::ffff:82.165.176.132], time=0
Feb  5 01:31:36 h1162492 postfix/smtpd[16159]: connect from triangle2.neurobiologie.fu-berlin.de[130.133.46.62]
Feb  5 01:31:36 h1162492 postfix/smtpd[16159]: lost connection after CONNECT from triangle2.neurobiologie.fu-berlin.de[130.133.46.62]
Feb  5 01:31:36 h1162492 postfix/smtpd[16159]: disconnect from triangle2.neurobiologie.fu-berlin.de[130.133.46.62]
Feb  5 03:30:59 h1162492 postfix/smtpd[23804]: connect from ipx10275.ipxserver.de[80.190.243.165]
Feb  5 03:30:59 h1162492 postfix/smtpd[23804]: lost connection after CONNECT from ipx10275.ipxserver.de[80.190.243.165]
Feb  5 03:30:59 h1162492 postfix/smtpd[23804]: disconnect from ipx10275.ipxserver.de[80.190.243.165]
Feb  5 05:46:22 h1162492 postfix/pickup[1552]: 7A5138E070C: uid=0 from=<root>
Feb  5 05:46:22 h1162492 postfix/cleanup[5365]: 7A5138E070C: message-id=<20070205044622.7A5138E070C@h1162492>
Feb  5 05:46:22 h1162492 postfix/qmgr[19793]: 7A5138E070C: from=<root@h1162492.local>, size=1412, nrcpt=1 (queue active)
Feb  5 05:46:22 h1162492 postfix/smtp[5367]: 7A5138E070C: to=<info@saeco-support-forum.de>, relay=saeco-support-forum.de[82.96.82.120], delay=0, status=sent (250 Ok: queued as CFE4085088D)
Feb  5 05:46:22 h1162492 postfix/qmgr[19793]: 7A5138E070C: removed
Feb  5 06:27:36 h1162492 postfix/smtpd[7535]: connect from 59-117-120-12.dynamic.hinet.net[59.117.120.12]
Feb  5 06:27:37 h1162492 postfix/smtpd[7535]: NOQUEUE: reject: RCPT from 59-117-120-12.dynamic.hinet.net[59.117.120.12]: 554 <888@mydv99.com>: Relay access denied; from=<xxx@mydv99.com> to=<888@mydv99.com> proto=SMTP helo=<81.169.128.27>
Feb  5 06:27:38 h1162492 postfix/smtpd[7535]: lost connection after RCPT from 59-117-120-12.dynamic.hinet.net[59.117.120.12]
Feb  5 06:27:38 h1162492 postfix/smtpd[7535]: disconnect from 59-117-120-12.dynamic.hinet.net[59.117.120.12]
Feb  5 06:41:02 h1162492 postfix/smtpd[8053]: connect from ns1.propertyfinder.gr[62.103.159.170]
Feb  5 06:41:02 h1162492 postfix/smtpd[8053]: lost connection after CONNECT from ns1.propertyfinder.gr[62.103.159.170]
Feb  5 06:41:02 h1162492 postfix/smtpd[8053]: disconnect from ns1.propertyfinder.gr[62.103.159.170]
Feb  5 06:46:09 h1162492 imaplogin: Connection, ip=[::ffff:209.211.250.211]
Feb  5 06:46:09 h1162492 imaplogin: DISCONNECTED, ip=[::ffff:209.211.250.211], time=0
Feb  5 07:14:37 h1162492 postfix/smtpd[10238]: connect from a2.48.5746.static.theplanet.com[70.87.72.162]
Feb  5 07:14:37 h1162492 postfix/smtpd[10238]: lost connection after CONNECT from a2.48.5746.static.theplanet.com[70.87.72.162]
Feb  5 07:14:37 h1162492 postfix/smtpd[10238]: disconnect from a2.48.5746.static.theplanet.com[70.87.72.162]
Feb  5 08:23:28 h1162492 postfix/smtpd[15614]: connect from 59-104-185-253.adsl.dynamic.seed.net.tw[59.104.185.253]
Feb  5 08:23:30 h1162492 postfix/smtpd[15616]: connect from 220-245-214-69-act.tpgi.com.au[220.245.214.69]
Feb  5 08:23:30 h1162492 postfix/smtpd[15616]: lost connection after CONNECT from 220-245-214-69-act.tpgi.com.au[220.245.214.69]
Feb  5 08:23:30 h1162492 postfix/smtpd[15616]: disconnect from 220-245-214-69-act.tpgi.com.au[220.245.214.69]
Feb  5 08:24:10 h1162492 postfix/smtpd[15614]: NOQUEUE: reject: RCPT from 59-104-185-253.adsl.dynamic.seed.net.tw[59.104.185.253]: 554 <mail@creative-catering.info>: Relay access denied; from=<mail@creative-catering.info> to=<mail@creative-catering.info> proto=SMTP helo=<59-104-185-253.adsl.dynamic.seed.net.tw>
Feb  5 08:29:10 h1162492 postfix/smtpd[15614]: timeout after RCPT from 59-104-185-253.adsl.dynamic.seed.net.tw[59.104.185.253]
Feb  5 08:29:10 h1162492 postfix/smtpd[15614]: disconnect from 59-104-185-253.adsl.dynamic.seed.net.tw[59.104.185.253]
Feb  5 09:01:18 h1162492 postfix/pickup[16096]: BCF7C8E070C: uid=0 from=<root>
Feb  5 09:01:18 h1162492 postfix/cleanup[17949]: BCF7C8E070C: message-id=<20070205080118.BCF7C8E070C@h1162492>
Feb  5 09:01:18 h1162492 postfix/qmgr[19793]: BCF7C8E070C: from=<root@h1162492.local>, size=848, nrcpt=1 (queue active)
 
Da ist nichts zugestellt worden, das einzige was zugestellt wurde ist folgende Mail, aber die sieht nach Absicht aus und nicht unfreiwillig:
Code:
Feb  5 05:46:22 h1162492 postfix/qmgr[19793]: 7A5138E070C: from=<root@h1162492.local>, size=1412, nrcpt=1 (queue active)
Feb  5 05:46:22 h1162492 postfix/smtp[5367]: 7A5138E070C: to=<info@saeco-support-forum.de>, relay=saeco-support-forum.de[82.96.82.120], delay=0, status=sent (250 Ok: queued as CFE4085088D)
 
@Darkdream

Danke das du dir mal den Log angeschaut hast, habe ich auch so gesehen. Mich hat es nur verwirt mit dem "time=0" und bei einen "time=1".

Danke
 
Back
Top