Can anyone help me figure what these log entries are?

K

knoxhosting

Verified User
Joined
Jan 10, 2005
Messages
42
My Exim mainlog has over 100MB of this, as you can see several times per second. Over and over and over and over again.

Code: 
2005-05-30 14:52:04 1DbzzK-0006bA-Ll SMTP error from remote mailer after end of data: host mailin-02.mx.aol.com [64.12.138.89]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:06 1Dc04d-0001Dy-Cd SMTP error from remote mailer after end of data: host mailin-01.mx.aol.com [64.12.137.89]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:06 1Dc04d-0001Dy-Cd == [email][email protected][/email] R=lookuphost T=remote_smtp defer (0): SMTP error from remote mailer after end of data: host mailin-01.mx.aol.com [64.12.137.89]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:07 1Dbzvf-0003tV-U2 SMTP error from remote mailer after end of data: host mailin-02.mx.aol.com [205.188.159.217]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:08 1DbzzK-0006bA-Ll SMTP error from remote mailer after end of data: host mailin-02.mx.aol.com [205.188.156.249]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:08 1Dbzvf-0003tV-U2 SMTP error from remote mailer after end of data: host mailin-02.mx.aol.com [205.188.156.249]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:12 1Dbzvf-0003tV-U2 SMTP error from remote mailer after end of data: host mailin-02.mx.aol.com [64.12.137.121]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:12 1Dbzvf-0003tV-U2 SMTP error from remote mailer after end of data: host mailin-03.mx.aol.com [205.188.158.121]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:13 1Dbzvf-0003tV-U2 SMTP error from remote mailer after end of data: host mailin-03.mx.aol.com [64.12.137.249]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:13 1Dbzvf-0003tV-U2 == [email][email protected][/email] R=lookuphost T=remote_smtp defer (0): SMTP error from remote mailer after end of data: host mailin-03.mx.aol.com [64.12.137.249]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:14 1DbzG6-00018r-UP SMTP error from remote mailer after end of data: host mailin-04.mx.aol.com [64.12.137.184]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:15 1DbzG6-00018r-UP SMTP error from remote mailer after end of data: host mailin-04.mx.aol.com [64.12.138.185]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:16 1DbzG6-00018r-UP SMTP error from remote mailer after end of data: host mailin-02.mx.aol.com [205.188.156.249]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:17 1DbzG6-00018r-UP SMTP error from remote mailer after end of data: host mailin-02.mx.aol.com [64.12.137.121]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:18 1DbzzK-0006bA-Ll SMTP error from remote mailer after end of data: host mailin-02.mx.aol.com [64.12.137.121]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:18 1DbzG6-00018r-UP SMTP error from remote mailer after end of data: host mailin-02.mx.aol.com [205.188.159.217]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:18 1DbzG6-00018r-UP == [email][email protected][/email] R=lookuphost T=remote_smtp defer (0): SMTP error from remote mailer after end of data: host mailin-02.mx.aol.com [205.188.159.217]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:18 1DbzzK-0006bA-Ll SMTP error from remote mailer after end of data: host mailin-01.mx.aol.com [64.12.137.89]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:18 1DbzzK-0006bA-Ll == [email][email protected][/email] R=lookuphost T=remote_smtp defer (0): SMTP error from remote mailer after end of data: host mailin-01.mx.aol.com [64.12.137.89]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
2005-05-30 14:52:19 1Dc0E7-00075X-9T SMTP error from remote mailer after end of data: host mailin-01.mx.aol.com [205.188.159.57]: 421-:  (DNS:NR)  [url]http://postmaster.info.aol.com/errors/421dnsnr.html\n421[/url] SERVICE NOT AVAILABLE
 
A quick check of http://postmaster.aol.com/errors/421dnsnr.html shows the error in question is caused by you not having valid reverse DNS for your mailserver IP address.

As stated in that page, AOL is refusing your email because you don't have reverse DNS setup.

If you own the server contact your provider to set up reverse DNS for you. If you're just a hosting customer, contact your hosting company.

Jeff
 
But I'm not sending email to AOL -- there's 2 accounts on the server I own and the server sends out about 10 emails a day.

Is this a program running somewhere sending spam or something? It's like 3-5 time PER SECOND and the log is filling up fast.
 
It it's three to five times per second and you're sure you're not sending email to to AOL, then the problem is probably that you're the spammer.

Not necessarily (and hopefully not) knowingly.

Yes, it's time to start checking your server.

Jeff
 
You must log in or register to reply here.
Back
Top