Notify admin and user if user exceeds the email limit

Ten minutes ago ive deleted all data in /etc/virtual/usage for a cleanup...

Now the unknow.bytes doesnt exist and unknow file has been used 2 times

-rw-rw---- 1 root mail 2 2 mar 10:45 unknown


But, this unknow user regard the sender verify too?

I mean, the curios part was that when enabled sender verify for first 20minutes worked just fine, no block of know host and no email lost, then, after about 20minutes started to block everything with verify failed.

If you would like to make some test with this option on my server for me is ok, just let me know and ill send you the login data.

Regards
 
Maybe you could check as well? We're getting a lot of falsely tagged unknowns added to the virtual/usage/unknown while they should go into the virtial/uages/localuser file.
 
Code:
-rw-rw---- 1 root mail    167 15 mar 15:14 unknown

Yes im getting it aswell with latest pre-release
Code:
2011-03-15 14:30:46 1PzUKd-0001NO-LH ** [email protected] F=<[email protected]> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT

for example this is one of those errors, but, tele2.it is not hosted by me and ladispolicalcio.it yes... so, dunno what this user made, maybe is system ticket report that are going no-where.

Regards
 
Hello,

I'll set the exim.pl to check for that case can ignore it, if you can confirm that the emails are not going anywhere and won't count. The current exim.pl has "log_time" for the user.bytes, so that should help debug.

John
 
Well,

Code:
2011-03-16 02:35:31 1Pzfe0-0004JR-UQ ** [email protected] F=<[email protected]> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mailgw.swip.net [212.247.156.1]: 550 [email protected] unknown user account

The unknown user account is the reply from the remote server, that should be totally sure that is not going anywhere but, i dont get why local server save as "unknown" in usage directory if the sender is user@domain (and prolly is trying to send a message ticket email that shouldn't be counted i think).

Regards
 
Hello,

There are 2 separate issues there.
1) The delivery that sends to a non-existent account
2) The logging of a delivery from an 'unknown' user.

They're not going to be related.
The word "unknown" that is logged in /etc/virtual/usage is generated by the exim.pl when it cannot figure out who sent the message... so my main curiosity is where this message came from to prevent the exim.pl from knowing who sent it.

The actual failure message about the non-existent comes after the lookup, and after the /etc/virtual/usage/* logging is done, hence they're not likely related.

The word "unknown" from this text "550 [email protected] unknown user account" is not going to be related to the word "unknown" from /etc/virtual/usage/*, however the generation of that type of message could be related (not sure).

So right now, what I'm looking for is the message itself that was being processed when the /etc/virtual/usage/unknown log entry was made, where it came from, who sent it, where it's going, etc.. This info is needed so we can decide if the "unknown" user can be whitelisted and not logged, or if it should be left alone, (or something else if a special case comes up)

Again, the /etc/virtual/usage/unknown log will be increased only when the "lookuphost" router is used.. meaning this is an outbound email from <someone>.

John
 
That seems a bit like a quick hack to me. The exim.pl falsely tags email recipients and senders as unknown and your solution would be to just not keep track of these unknowns? Imho the real problem is the fact exim.pl tags these emails as unknown in the first place, there is clearly something wrong in the algoritm itself.

Like the example I posted earlier, an email from/for a local user, should never be tagged as an "unknown" user. In this case it even got blocked because the usage/unknown file was already at the server's limit as well.

But again please find out first why this local user is falsely tagged as an unknown user, this should only happen if a local sender is trying to fake an email account or if for some reason another email server thinks we're the handling email server for some domain we actually aren't, though probably in that last case it should've already been rejected directly.

We now get 1000s of emails a day that are tagged as unknown on some of our servers by the way, maybe it's an idea to also start a .bytes for the unkown users so you/we can debug more easy?
 
Hello,
So right now, what I'm looking for is the message itself that was being processed when the /etc/virtual/usage/unknown log entry was made, where it came from, who sent it, where it's going, etc.. This info is needed so we can decide if the "unknown" user can be whitelisted and not logged, or if it should be left alone, (or something else if a special case comes up)
John

Did you also see my earlier post?

The user in this example is just a normal local email user that should've been tagged as known user.
 
Hello,

Agreed and I prefer not to use that method. Right now, I need to know what context that message was generated from so we can fix it. Currently, I'm not able to generate the "unknown" case, so need to know where it comes from.. how it's generated, who sent it, etc..

The confusing part (assuming you've got a semi-recent exim.pl) is that there *should* be a unknown.bytes log. The creation of usage/unkown is a subset of the function that creates usage/unknown.bytes. If unknown.bytes isn't present, I couldn't give you a reason why.. perhaps ensure you've got the absolute latest exim.pl so we're looking at the same thing. The most recent version will have "#VERSION=8" at the top.

There was a very brief window of time (I believe less than a day) where the exim.pl would abort if the "unknown" case was used, but that was quickly changed back after it was determined that this was not the sender-verify case. It's possible that's the exim.pl you've got. Grab VERSION=8 either way.

John
 
Did you also see my earlier post?

The user in this example is just a normal local email user that should've been tagged as known user.
Is that entry for an incoming email?

If so, that's rather confusing... for whatever reason, it would be doing a delivery outbound for the inbound email. The "check_limit" is only for outbound deliveries.

Is there a forwarder setup on that account?
Is the sender verify enabled? (I tested it, but didn't get the unknown case, so not sure what the difference is here)

John
 
Looking closer, I'm wondering about this bit
Code:
r*******@gmail.com <[email protected]>
is the client "spoofing" his gmail account to his local domain? I'm wondering if that's playing into it at all.

John
 
If the feature for the /etc/virtual/usage/unknown log file is alraedy in exim.pl so is not an outbound email cause ive not that file, right?

I just found in the exim log a strange line, maybe you should find useful info or help me understanding this:

Code:
2011-03-13 08:18:48 1PxwOs-0000rl-8a ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail.soonphra.com [203.146.140.217]: 550 5.1.1 <[email protected]> User unknown; rejecting
2011-03-13 11:45:05 1Pyimz-0000wH-7v ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx5.telecomitalia.it [217.169.121.16]: 550 5.1.1 User unknown
2011-03-13 13:48:00 1PyV7N-00005e-KM ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail.uispbologna.it [77.89.9.193]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table
2011-03-13 18:29:34 1Py5gU-0006ZL-W7 ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host meu-mx.ntg.com.br [201.6.253.123]: 550 5.1.1 User unknown
2011-03-13 19:44:32 1Py75x-0002ju-4V ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host w3.tks.ru [81.211.114.131]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table
2011-03-13 20:44:39 1PyrDT-0000cZ-1t ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail2.tiogaopp.org [66.192.43.106]: 550 5.1.1 User unknown
2011-03-13 22:29:15 1Pysqg-0004io-9n ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host smtp.upcpoczta.pl [213.46.255.2]: 550 5.1.1 <[email protected]> unknown recipient rejected
2011-03-14 01:14:40 1PyvQl-0004uq-Su ** Álvarosá[email protected] <ÁlvaroSá[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<ÁlvaroSá[email protected]>: host mx0.gmx.com [74.208.5.90]: 550 5.1.1 <ÁlvaroSá[email protected]>... User is unknown {mx-us012}
2011-03-14 02:05:07 1PywDZ-0006PU-Re ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx0.gmx.com [74.208.5.90]: 550 5.1.1 <[email protected]>... User is unknown {mx-us005}
2011-03-14 15:02:53 1PyPM4-0008RW-7i ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host w3.tks.ru [81.211.114.131]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in virtual mailbox table
2011-03-14 15:35:55 1Pz8sD-0006k8-VU ** martí[email protected] <Martí[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<Martí[email protected]>: host mx1.supremebox.com [209.25.170.16]: 550 unknown recipient: route
2011-03-14 21:14:50 1PyV7N-00005e-KM ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail.uispbologna.it [77.89.9.193]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in local recipient table
2011-03-15 03:14:42 1PzJmS-0005al-MZ ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host abbott.recol.net [64.207.103.23]: 550 5.1.1 <[email protected]>: Recipient address rejected: User unknown in relay recipient table
2011-03-15 12:00:15 1Pyimz-0000wH-7v ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.telecomitalia.it [217.169.121.15]: 550 5.1.1 User unknown
2011-03-15 20:39:51 1Pza5u-0004fj-7K ** Álvarosá[email protected] <ÁlvaroSá[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<ÁlvaroSá[email protected]>: host mx0.gmx.com [74.208.5.90]: 550 5.1.1 <ÁlvaroSá[email protected]>... User is unknown {mx-us017}
2011-03-15 20:44:41 1PyrDT-0000cZ-1t ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail2.tiogaopp.org [66.192.43.106]: 550 5.1.1 User unknown
2011-03-15 22:30:04 1Pysqg-0004io-9n ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host smtp.upcpoczta.pl [213.46.255.2]: 550 5.1.1 <[email protected]> unknown recipient rejected
2011-03-16 01:14:51 1PyvQl-0004uq-Su ** Álvarosá[email protected] <ÁlvaroSá[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<ÁlvaroSá[email protected]>: host mx0.gmx.com [74.208.5.90]: 550 5.1.1 <ÁlvaroSá[email protected]>... User is unknown {mx-us013}
2011-03-16 02:15:07 1PywDZ-0006PU-Re ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx0.gmx.com [74.208.5.90]: 550 5.1.1 <[email protected]>... User is unknown {mx-us017}
2011-03-16 03:03:24 1Pzg54-00056G-UI ** Álvarosá[email protected] <ÁlvaroSá[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<ÁlvaroSá[email protected]>: host mx0.gmx.com [74.208.5.90]: 550 5.1.1 <ÁlvaroSá[email protected]>... User is unknown {mx-us012}
2011-03-16 07:30:22 1PzkF7-0004e7-Ow ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host ttfarm.ttnet.net.tr [88.255.235.2]: 550 5.1.1 User unknown
2011-03-16 09:45:12 1PzmLc-00019t-04 ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.telecomitalia.it [217.169.121.15]: 550 5.1.1 User unknown


The sender seems to be no-one (so unknown) F=<> and is sending email to unexisting email.... so i tryed to grep just F=<> and i found so many entries

here some of those lines:

Code:
2011-03-15 20:44:35 H=gmmr2.centrum.cz [90.183.38.158] F=<> rejected RCPT <[email protected]>:
2011-03-15 20:44:41 1PyrDT-0000cZ-1t ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail2.tiogaopp.org [66.192.43.106]: 550 5.1.1 User unknown
2011-03-15 20:48:44 H=gmmr4.centrum.cz [90.183.38.143] F=<> rejected RCPT <[email protected]>:
2011-03-15 20:50:26 H=gmmr8.centrum.cz [90.183.38.151] F=<> rejected RCPT <[email protected]>:
2011-03-15 20:51:50 H=glamf02.netintelligence.com (mailfilter.iomart.com) [62.128.193.112] F=<> rejected RCPT <[email protected]>:
2011-03-15 20:52:43 H=mail-bw0-f68.google.com [209.85.214.68] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-15 21:01:59 1PzaRL-0005tJ-Qu => mario <[email protected]> F=<> R=virtual_user T=virtual_localdelivery S=2985
2011-03-15 21:02:56 1PzaSA-0005vj-DO ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host accused.com [74.124.210.163]: 550 No Such User Here
2011-03-15 21:06:12 H=mailgw04.kcn.ne.jp [61.86.7.211] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:13:05 H=easfw.eastec.de (EAS003.eastec.de) [62.153.157.126] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:18:39 H=(hp-makers.com) [219.94.144.185] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:18:53 H=web01.niigata-nippo.com [218.223.34.193] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:19:33 H=sh02.netage.ne.jp [203.140.24.17] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:21:31 H=svm.vetmed.wisc.edu [128.104.212.106] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:26:50 H=rcpt-expgw2.biglobe.ne.jp [122.130.255.2] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:27:02 H=mxavas5.alicom.com [217.73.225.45] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:30:02 H=(mail.isearch.com.hk) [202.181.232.233] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:30:04 H=v7suns.7suns.com [204.202.12.8] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:30:45 H=lcdi.fr (ns21789.ovh.net) [91.121.31.16] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:33:50 H=saturne.lpcom.net [193.238.231.161] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:34:40 H=www.a-neptune.com [124.108.33.192] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:36:02 H=www398.sakura.ne.jp [59.106.13.28] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:36:22 H=(dns2.ablia.net) [83.149.156.179] F=<> rejected RCPT <[email protected]>:
2011-03-15 21:38:46 1Pzb0r-0007Oa-6H => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=4550
2011-03-15 21:55:28 H=6.he.optiservers.net (server241.nileweb.net) [64.62.191.6] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-15 21:55:44 H=mail.amur.ru [85.88.160.67] F=<> rejected RCPT <[email protected]>:
2011-03-15 22:05:17 H=mail.amur.ru [85.88.160.67] F=<> rejected RCPT <[email protected]>:
2011-03-15 22:05:17 1PzbQS-0000Ji-0B => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=12353
2011-03-15 22:16:18 1PzbbA-0000jr-18 => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=10870
2011-03-15 22:16:50 1Pzbbg-0000l4-TN => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=4677
2011-03-15 22:17:02 1Pzbbm-0000lH-CK => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=9758
2011-03-15 22:26:03 1Pzbkb-0001Av-NO => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=10828
2011-03-15 22:26:10 1Pzbki-0001CD-Ut => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=9742
2011-03-15 22:26:34 1Pzbl7-0001Bp-6p => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=5391
2011-03-15 22:29:54 1PzboK-0001LD-54 ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after initial connection: host smtp.secureserver.net [216.69.186.201]: 554-m1pismtp01-026.prod.mesa1.secureserver.net\n554 Your access to this mail system has been rejected due to spam or virus content. If you believe that this failure is in error, please submit an unblock request at  http://unblock.secureserver.net
2011-03-15 22:30:02 1PzboQ-0001LR-Ra ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail.ramoshnos.com [64.14.68.65]: 511 sorry, no mailbox here by that name (#5.1.1 - chkuser)
2011-03-15 22:30:04 1Pysqg-0004io-9n ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host smtp.upcpoczta.pl [213.46.255.2]: 550 5.1.1 <[email protected]> unknown recipient rejected
2011-03-15 22:44:50 1Pzc2p-0001vs-Mr => [email protected] F=<> R=lookuphost T=remote_smtp S=1225 H=gmail-smtp-in.l.google.com [74.125.77.27] X=TLSv1:RC4-SHA:128 C="250 2.0.0 OK 1300225494 m10si476345wbm.16"
2011-03-15 22:53:18 1PzcB4-0002Ji-Vh => mario <[email protected]> F=<> R=virtual_user T=virtual_localdelivery S=26775
2011-03-15 23:41:59 H=mail1.onego.ru [78.36.60.227] F=<> rejected RCPT <[email protected]>:
2011-03-15 23:43:08 H=chile.inc.cl [190.96.77.99] F=<> rejected RCPT <[email protected]>:
2011-03-16 00:05:39 H=btx.expo-vpa.ru (expo-vpa.spb.ru) [195.182.131.62] F=<> rejected RCPT <[email protected]>:
2011-03-16 00:18:11 1PyuUb-0000ir-BJ ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host server32.firstfind.nl [85.158.203.118]: 550 5.7.1 <[email protected]>... Relaying denied. Proper authentication required.
2011-03-16 00:19:19 1PzczR-0004Lp-UD => [email protected] F=<> R=lookuphost T=remote_smtp S=6548 H=smtp.moldnet.md [83.218.222.43] X=TLSv1:AES256-SHA:256 C="250 OK id=1PzdTw-0007Ye-8W"
2011-03-16 00:27:06 H=mail.m-c-s-inc.org [69.51.67.234] F=<> rejected RCPT <[email protected]>:
2011-03-16 00:27:11 H=mailx.mopera.net (mapsmtakv1.mopera.net) [110.158.2.16] F=<> rejected RCPT <[email protected]>:
2011-03-16 00:28:31 H=wpc4682.host7x24.com [85.10.128.211] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 00:29:50 H=ns202890.ovh.net [91.121.164.181] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 00:33:19 H=mail.consorcioterrenos.com (CTADMIN.consorcioterrenos.com) [200.76.188.212] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 00:35:05 H=gmmr7.centrum.cz [90.183.38.150] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 00:35:28 H=www668.sakura.ne.jp [59.106.19.98] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 00:37:39 H=mailx.mopera.net (mapsmtagv3.mopera.net) [110.158.2.10] F=<> rejected RCPT <[email protected]>:
2011-03-16 00:41:45 H=carefulcomputing.demon.co.uk (foh.careful.co.uk) [62.49.12.192] F=<> rejected RCPT <[email protected]>:
2011-03-16 00:44:28 H=rrcs-24-123-244-194.central.biz.rr.com (Exchange.NovusClinic.local) [24.123.244.194] F=<> rejected RCPT <[email protected]>:
2011-03-16 00:54:23 H=gmmr1.centrum.cz [90.183.38.157] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 00:56:03 H=gmmr2.centrum.cz [90.183.38.158] F=<> rejected RCPT <[email protected]>:
2011-03-16 00:57:23 H=mail.atlbiz.com [64.212.211.9] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:01:09 H=nm06omta12.auone-net.jp (nmomta.auone-net.jp) [219.125.112.29] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:02:23 H=mail2.nitten.co.jp (vsmtp1.dnes.co.jp) [211.0.135.42] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:06:20 H=sun.kawamoto-town.jp [210.163.139.178] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:06:48 H=ip-54.net-80-236-0.static.numericable.fr (prothea.com) [80.236.0.54] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:12:10 H=mail.tibc.ru [195.239.244.124] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:14:05 H=defer-pm01.ocn.ad.jp [122.1.234.5] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:14:51 1PyvQl-0004uq-Su ** Álvarosá[email protected] <ÁlvaroSá[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<ÁlvaroSá[email protected]>: host mx0.gmx.com [74.208.5.90]: 550 5.1.1 <ÁlvaroSá[email protected]>... User is unknown {mx-us013}
2011-03-16 01:15:15 1PyvQj-0004uO-Bu ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mxs.ht-systems.ru [78.110.50.88]: 550 rule #1, unrouteable address
2011-03-16 01:16:09 H=lakewo2.lnk.telstra.net (remote.elitepropertygroup.com.au) [203.45.32.246] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:16:32 H=sucre.magic.fr [188.130.33.13] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:17:14 H=146.209.216.87.static.jazztel.es (correo.asomo.net) [87.216.209.146] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:17:59 H=equal.iaxs.net [209.134.128.2] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:30:00 H=mail.snjmwa.org [63.230.135.204] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:30:04 H=outbound-bu1.dca.untd.com [64.136.47.11] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:36:41 H=vorlon.thehostingfactory.net [208.100.29.84] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:37:54 H=mail.cdri.com (cedar.cdri.local) [68.178.75.217] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:42:04 H=farmaciait1.dinamiqa.com [161.58.14.139] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:43:46 H=smtp.fadesa.es (hermes.fadesa.es) [195.55.55.74] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:47:28 H=ns.ncs.ac.jp (ncs.ac.jp) [202.232.38.65] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:47:28 H=ns.ncs.ac.jp (ncs.ac.jp) [202.232.38.65] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:47:28 H=ns.ncs.ac.jp (ncs.ac.jp) [202.232.38.65] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:47:28 H=ns.ncs.ac.jp (ncs.ac.jp) [202.232.38.65] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:53:48 H=server1.robnet.org [81.8.167.100] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:56:31 H=smtp1.mail.osogrande.com (smtp4.mail.osogrande.com) [207.66.126.42] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:57:09 H=mail-yw0-f66.google.com [209.85.213.66] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:58:13 H=smtpout-3203.bay.webtv.net [209.240.205.138] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 01:58:18 H=mail-gy0-f194.google.com [209.85.160.194] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:58:42 H=mail-gw0-f66.google.com [74.125.83.66] F=<> rejected RCPT <[email protected]>:
2011-03-16 01:59:57 H=(mail.safewayr.com) [60.249.38.23] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:06:44 H=(backupmx.sinte.net) [81.29.203.185] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:07:59 H=mail-bw0-f68.google.com [209.85.214.68] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:09:28 H=host01.psrglobalweb.com [217.16.1.33] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:09:29 H=host01.psrglobalweb.com [217.16.1.33] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:09:30 H=host01.psrglobalweb.com [217.16.1.33] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:10:20 H=vcgwp3.bit-drive.ne.jp [211.9.32.214] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:10:20 H=vcgwp3.bit-drive.ne.jp [211.9.32.214] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:10:20 H=vcgwp3.bit-drive.ne.jp [211.9.32.214] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:10:20 H=vcgwp3.bit-drive.ne.jp [211.9.32.214] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:10:20 H=vcgwp3.bit-drive.ne.jp [211.9.32.214] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:10:20 H=vcgwp3.bit-drive.ne.jp [211.9.32.214] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:10:21 H=vcgwp3.bit-drive.ne.jp [211.9.32.214] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:10:21 H=vcgwp3.bit-drive.ne.jp [211.9.32.214] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:10:21 H=vcgwp3.bit-drive.ne.jp [211.9.32.214] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:13:44 H=static-98-108-58-42.chi01.dsl-w.verizon.net (server1.archerinc.net) [98.108.58.42] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:15:07 1PywDZ-0006PU-Re ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx0.gmx.com [74.208.5.90]: 550 5.1.1 <[email protected]>... User is unknown {mx-us017}
2011-03-16 02:27:35 H=mta163.mail.tnz.yahoo.co.jp [203.216.228.228] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:27:41 1PzfWQ-00042g-Qv => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=65089
2011-03-16 02:28:21 1PzfX6-00043s-07 => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=5579
2011-03-16 02:28:28 1PzfXC-00043y-81 => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=63979
2011-03-16 02:29:07 H=(fepna11-svc.tim.it) [217.200.184.87] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:30:42 H=(www.xjgzinfo.com) [61.138.232.119] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:30:43 H=(www.xjgzinfo.com) [61.138.232.119] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:30:43 H=(www.xjgzinfo.com) [61.138.232.119] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:31:45 H=bishop.dnp.co.jp [202.214.150.2] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:33:07 H=mail.tha.org [24.173.19.185] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:36:28 H=ms4.sony.co.jp [211.125.136.198] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:46:08 H=mail.kspd.ru [213.21.0.50] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:46:44 H=(LY-CN-NE-EX1.leyou.net.cn) [218.106.247.73] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:46:45 H=dg.amefrec.co.jp (AFS110) [218.42.156.1] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:46:47 H=dg.amefrec.co.jp (AFS110) [218.42.156.1] F=<> rejected RCPT <[email protected]>:
2011-03-16 02:58:39 H=mail-yi0-f68.google.com [209.85.218.68] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:58:39 H=mail-yi0-f68.google.com [209.85.218.68] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:58:39 H=mail-yx0-f196.google.com [209.85.213.196] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:58:39 H=mail-gy0-f196.google.com [209.85.160.196] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:58:39 H=mail-gy0-f196.google.com [209.85.160.196] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:58:39 H=mail-gy0-f196.google.com [209.85.160.196] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:58:39 H=mail-gy0-f196.google.com [209.85.160.196] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:58:39 H=mail-gy0-f196.google.com [209.85.160.196] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:58:40 H=mail-gx0-f196.google.com [209.85.161.196] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 02:58:40 H=mail-gx0-f196.google.com [209.85.161.196] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 03:01:29 H=(mail04.cashmereneo.com) [121.12.252.120] F=<> rejected RCPT <[email protected]>:
2011-03-16 03:03:24 1Pzg54-00056G-UI ** Álvarosá[email protected] <ÁlvaroSá[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<ÁlvaroSá[email protected]>: host mx0.gmx.com [74.208.5.90]: 550 5.1.1 <ÁlvaroSá[email protected]>... User is unknown {mx-us012}
2011-03-16 03:03:45 1Pzg5R-00058V-7Q => [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp S=1295 H=mx4.fastwebnet.it [85.18.95.23] C="250 <4D3803570ECB4A17> Mail accepted"
2011-03-16 03:09:14 H=pinet.be (mailserver.pinet.be) [78.41.68.3] F=<> rejected RCPT <[email protected]>: Unrouteable address
2011-03-16 03:10:04 1PzgBS-0005Ex-HM => giorgia <[email protected]> F=<> R=spamcheck_director T=spamcheck S=4617
2011-03-16 03:10:13 H=mail-yw0-f78.google.com [209.85.213.78] F=<> rejected RCPT <[email protected]>:
2011-03-16 03:25:40 H=mail-bw0-f68.google.com [209.85.214.68] F=<> rejected RCPT <[email protected]>:
2011-03-16 03:31:41 H=mail-bw0-f68.google.com [209.85.214.68] F=<> rejected RCPT <[email protected]>:
2011-03-16 03:44:50 1Pzgj8-00061e-3G => [email protected] F=<> R=lookuphost T=remote_smtp S=1225 H=gmail-smtp-in.l.google.com [209.85.227.27] X=TLSv1:RC4-SHA:128 C="250 2.0.0 OK 1300243491 e5si870774wbi.13"
2011-03-16 03:46:32 H=mail.amur.ru [85.88.160.67] F=<> rejected RCPT <[email protected]>:
2011-03-16 03:57:55 H=nevamx.sovintel.ru [212.44.131.7] F=<> rejected RCPT <[email protected]>:
2011-03-16 04:28:11 H=mail-gy0-f194.google.com [209.85.160.194] F=<> rejected RCPT <[email protected]>:
2011-03-16 05:01:00 1Pzhuu-0000zX-IC ** [email protected] <[email protected]> F=<>: Unrouteable address
2011-03-16 05:24:15 1PziHK-0001QE-Hw => giorgia <[email protected]> F=<> R=spamcheck_director T=spamcheck S=4592
2011-03-16 05:30:02 1PziMz-0001Y9-3g ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail.magimix.ru [194.206.139.129]: 550 Unknown user
2011-03-16 05:30:06 1PziN0-0001aF-SV ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after end of data: host i.mx.mail.yahoo.com [74.6.140.64]: 554 delivery error: dd This user doesn't have a yahoo.com account ([email protected]) [0] - mta1177.mail.sk1.yahoo.com
2011-03-16 05:40:47 H=power.rus.net (mx.electrosystems.ru) [81.211.99.58] F=<> rejected RCPT <[email protected]>:
2011-03-16 05:57:22 H=(sv1.tooyoo.ru) [62.213.82.142] F=<> rejected RCPT <[email protected]>:
2011-03-16 05:58:58 H=mailout4.colt1.inetserver.de [195.234.228.179] F=<> rejected RCPT <[email protected]>:
2011-03-16 05:59:01 H=smtp03.tidc.telus.com (smtp.tidc.telus.com) [66.203.199.219] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:04:18 H=mail.brabenderti.com [68.179.123.105] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:06:18 H=mx03-rso-03.dci.ad.jp [210.175.129.88] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:08:24 H=vsmtp11.tin.it [212.216.176.187] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:18:09 H=mail.mobak.ru [212.33.236.72] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:19:10 1Pzj8T-0002cc-3m => webmaster <[email protected]> F=<> R=virtual_user T=virtual_localdelivery S=2369
2011-03-16 06:19:10 1Pzj8S-0002cH-W6 => webmaster <[email protected]> F=<> R=spamcheck_director T=spamcheck S=2066
2011-03-16 06:30:13 1PzjJE-0002s9-6v => [email protected] F=<> R=lookuphost T=remote_smtp S=5958 H=eforwardct.name-services.com [216.163.188.58] C="250 2.0.0 Ok: queued as 1E5D9B8E0B69D"
2011-03-16 06:37:32 H=(ocicat.irv.local) [64.206.203.188] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:37:41 H=mx01.siu.buap.mx [148.228.1.70] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:40:03 H=bulk1.mail-filter.nifty.com (trmail519.nifty.com) [202.248.236.209] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:40:18 1PzjSu-00033a-GF => info <[email protected]> F=<> R=virtual_user T=virtual_localdelivery S=2983
2011-03-16 06:40:18 1PzjSu-00033V-F0 => info <[email protected]> F=<> R=spamcheck_director T=spamcheck S=2723
2011-03-16 06:41:07 H=(esl-2k-dc-001.eurosoft-systems.com) [81.3.70.50] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:45:08 H=wmsserver.axacon.dk (axacon03.intern.axacon.com) [87.56.248.114] U=hidden-user F=<> rejected RCPT <[email protected]>:
2011-03-16 06:45:34 H=mail-yw0-f68.google.com [209.85.213.68] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:51:04 H=mail.yourmedia.uk.com (mailhost.Checkads.co.uk) [77.89.143.82] F=<> rejected RCPT <[email protected]>:
2011-03-16 06:52:00 H=postfix1.vitro.epldt.net (postfix01) [203.131.74.5] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:02:31 H=mail.wsh2.k12.wy.us [137.88.254.15] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:03:39 H=205.158.107.190.ptr.us.xo.net (mail.planetre.net) [205.158.107.190] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:04:13 H=cpe.ge-0-2-0-499.svgnqu2.customer.tele.dk (Postsrvjsc.jensschultz.local) [62.242.162.34] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:08:40 H=vs248129.vserver.de (ilutrab.de) [62.75.248.129] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:14:58 1Pzk0W-000485-Te => [email protected] F=<> R=lookuphost T=remote_smtp S=2026 H=eforwardct.name-services.com [216.163.188.58] C="250 2.0.0 Ok: queued as E1AFF716736C5"
2011-03-16 07:15:22 H=mail-gy0-f196.google.com [209.85.160.196] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:17:26 H=mail.icid.cu [200.55.133.90] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:18:59 H=(mail.amgmx.com) [64.211.61.15] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:22:18 H=mail.ennsco.ca (bogota.ennsco.ca) [142.179.148.142] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:28:10 H=tdcsix01.nekonet.ne.jp [218.40.2.14] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:30:01 1PzkF1-0004c4-AO => [email protected] F=<> R=lookuphost T=remote_smtp S=5231 H=marshal.titan.titantravel.co.uk [80.177.34.222] X=TLSv1:AES256-SHA:256 C="250 B4d8059620000 Message accepted for delivery"
2011-03-16 07:30:22 1PzkF7-0004e7-Ow ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host ttfarm.ttnet.net.tr [88.255.235.2]: 550 5.1.1 User unknown
2011-03-16 07:30:57 H=mail404.opentransfer.com [98.130.1.134] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:41:43 H=smtp-out.aarslevnet.dk [77.243.46.9] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:44:22 H=(host.powerwagonadvertiser.com) [205.234.98.131] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:50:51 H=(135868.jenntech.net) [72.3.253.89] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:59:44 H=ns33766.ovh.net [213.251.168.62] F=<> rejected RCPT <[email protected]>:
2011-03-16 07:59:50 1Pz1fv-0007ob-BB ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail.taikaverkko.fi [194.204.43.170]: 550 "Unknown User"
2011-03-16 08:04:43 H=server7001.dedicated.webfusion.co.uk (ds7001.dedicated.turbodns.co.uk) [94.136.44.9] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:08:39 H=2209.vh.cnolnic.com (2109.vh.cnolnic.com) [218.5.79.191] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:13:40 H=2209.vh.cnolnic.com (2109.vh.cnolnic.com) [218.5.79.191] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:15:00 1Pzkwb-00061Z-1m ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail.tourmusicfest.it [85.235.131.102]: 550 sorry, no mailbox here by that name. (#5.7.17)
2011-03-16 08:15:08 1Pz1zG-0000CX-CO ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host accused.com [74.124.210.163]: 550 No Such User Here
2011-03-16 08:16:33 H=mail.tangentuk.com [217.205.197.196] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:17:50 H=server88-208-221-36.live-servers.net (intektu.intektu.com) [88.208.221.36] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:18:08 H=mail.kemcity.ru (kemcity.ru) [212.75.210.69] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:26:17 H=host18.rtmedia.com (server-rtmedia.local) [81.27.79.18] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:26:17 H=host18.rtmedia.com (server-rtmedia.local) [81.27.79.18] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:30:31 H=gmmr3.centrum.cz [90.183.38.155] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:31:38 H=gmmr3.centrum.cz [90.183.38.155] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:35:59 H=mail-yw0-f68.google.com [209.85.213.68] F=<> rejected RCPT <[email protected]>:
2011-03-16 08:38:43 H=u5.nl (server.u5.nl) [62.197.129.7] F=<> rejected RCPT <[email protected]>:
2011-03-16 09:00:10 1PzleI-0007h8-Mh => [email protected] F=<> R=lookuphost T=remote_smtp S=109939 H=aspmx.l.google.com [74.125.79.27] X=TLSv1:RC4-SHA:128 C="250 2.0.0 OK 1300262412 g12si1184229wer.198"
2011-03-16 09:08:52 1Pzlmg-00084z-IG => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=5422
2011-03-16 09:09:01 1Pzlmo-00085h-Nj => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=15973
2011-03-16 09:09:48 1Pzlna-00088C-AB => owner-comitati <[email protected]> F=<> R=spamcheck_director T=spamcheck S=14868
2011-03-16 09:14:56 1Pz2vL-0002Rh-UY ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after end of data: host f.mx.mail.yahoo.com [98.137.54.237]: 554 delivery error: dd This user doesn't have a yahoo.com account ([email protected]) [0] - mta123.mail.sp2.yahoo.com
2011-03-16 09:15:01 1Pz2vI-0002RS-Jz ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after end of data: host topsecretswebsite.com.inbound15.mxlogic.net [208.65.145.12]: 554 Denied [CS] (Mode: normal)
2011-03-16 09:15:11 1Pzlsq-0008Nt-Ix => [email protected] F=<> R=lookuphost T=remote_smtp S=9253 H=newmailgate.eil.com [94.136.38.134] C="250 2.0.0 p2G8E5tR003328 Message accepted for delivery"
2011-03-16 09:17:40 1PzlvD-0008RP-7q => giorgia <[email protected]> F=<> R=spamcheck_director T=spamcheck S=4602
2011-03-16 09:30:03 1Pzm7G-0000X6-Cd => [email protected] F=<> R=lookuphost T=remote_smtp S=2066 H=eforwardct3.name-services.com [64.191.223.39] C="250 2.0.0 Ok: queued as 895E79D2B7D04"
2011-03-16 09:44:17 1PzmKy-00016z-8j => maurizio <[email protected]> F=<> R=virtual_user T=virtual_localdelivery S=3167
2011-03-16 09:44:17 1PzmKy-00015Z-8G => maurizio <[email protected]> F=<> R=spamcheck_director T=spamcheck S=2962
2011-03-16 09:45:12 1PzmLc-00019t-04 ** [email protected] <[email protected]> F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.telecomitalia.it [217.169.121.15]: 550 5.1.1 User unknown
2011-03-16 09:45:14 1Pz3Cn-0003IH-TH ** [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host in.sjc.mx.trendmicro.com [216.99.131.25]: 554 5.7.1 <[email protected]>: Recipient address rejected: Access denied
2011-03-16 09:45:18 1PzmLy-0001Er-CH => [email protected] F=<> R=lookuphost T=remote_smtp S=1282 H=mail303.ixwebhosting.com [76.162.254.119] C="250 ok:  Message 1570727260 accepted"
2011-03-16 09:53:15 H=mg.magnaglobal-eg.com (MGCAIMBX01.MCNMENA.LOCAL) [62.241.157.146] F=<> rejected RCPT <[email protected]>:
2011-03-16 10:02:43 H=tsn-group.ru (tsn-electric.ru) [213.170.93.70] F=<> rejected RCPT <[email protected]>:

So, now i suppose that my server is sending many emails (most of them to not-valid external users) without a real sender and so hard to find who is the responsable.

Am i right?

Checking on directadmin mailqueue i can find many email with the sender <>

checking one of this it seems that server receive email from a spammer that use fake email, and server send back the error mail but get bounced cause the email doesnt exist.

I paste here one of those, maybe is more clear then my english :)

Code:
1PzIau-0003bq-FO-H
mail 8 12
<>
1300150720 0
-ident mail
-received_protocol local
-body_linecount 239
-max_received_linelength 338
-allow_unqualified_recipient
-allow_unqualified_sender
-frozen 1300150721
-localerror
XX
1
[email protected]

155P Received: from mail by Orange01.CrazyNetwork.it with local (Exim 4.73)
	id 1PzIau-0003bq-FO
	for [email protected]; Tue, 15 Mar 2011 01:58:40 +0100
072  X-Failed-Recipients: [email protected],
  [email protected]
029  Auto-Submitted: auto-replied
068F From: Mail Delivery System <[email protected]>
029T To: [email protected]
059  Subject: Mail delivery failed: returning message to sender
057I Message-Id: <[email protected]>
038  Date: Tue, 15 Mar 2011 01:58:40 +0100

Code:
1PzIau-0003bq-FO-D
This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  [email protected]
    (ultimately generated from [email protected])
    
  [email protected]
    (ultimately generated from [email protected])
    

------ This is a copy of the message, including all the headers. ------

Return-path: <[email protected]>
Received: from mail by Orange01.CrazyNetwork.it with spam-scanned (Exim 4.73)
	(envelope-from <[email protected]>)
	id 1PzIao-0003be-Jk
	for [email protected]; Tue, 15 Mar 2011 01:58:40 +0100
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
	Orange01.CrazyNetwork.it
X-Spam-Level: **
X-Spam-Status: No, score=2.2 required=3.5 tests=HTML_MESSAGE,MIME_QP_LONG_LINE,
	RDNS_NONE,SPF_SOFTFAIL autolearn=no version=3.3.1
Received: from [186.81.34.31] (helo=Dynamic-IP-186813431.cable.net.co)
	by Orange01.CrazyNetwork.it with esmtp (Exim 4.73)
	(envelope-from <[email protected]>)
	id 1PzIam-0003bZ-Of
	for [email protected]; Tue, 15 Mar 2011 01:58:34 +0100
Received: from [186.81.34.31] (port=7553 helo=Equipo01)
	by mail.weblove.in.ua with asmtp 
	id 502427-000577-20
	for <[email protected]>; Mon, 14 Mar 2011 21:58:28 -0300
Message-ID: <740270A883834B96B07708273E46BE19@Equipo01>
From: =?koi8-r?B?xsnSzcEtz8TOz8TOxdfLwQ==?= <[email protected]>
To: <[email protected]>
Subject: =?koi8-r?B?7MXHwczYzs/FIM/CzsHMyd7J18HOycU=?=
Date: Mon, 14 Mar 2011 21:58:28 -0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0005_01CBE2AC.184F8CF0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
X-Spam: Not detected
X-Mras: Ok

This is a multi-part message in MIME format.

------=_NextPart_000_0005_01CBE2AC.184F8CF0
Content-Type: text/plain;
	charset="windows-1251"
Content-Transfer-Encoding: quoted-printable

I8 ����� 2011�.
(�95) ��5*�9*68 \\\/// ��5-3266

��������� ������������ � �������� �������: ��� ���� ��� ��������� � ����-���������� � �� ����������
 

1.��� ����� "������", "�����" � "�����" �����, ���������, �����-���������� ("�������", "����������������" ��� "����������" ����������������, "������" � �.�.).��� ������� �������� �����������-���������� � ��������� ��������� � ���.

2.�������������. ��� ���� ������������:
-"������" �������� � ������ ������������� �������;
-������ ��������, ������� �� ������� ��������� ����������;
-���������� ������������ (������, ������, �������������� ������������ ������������);

�������� ������������ (������ ��� �������� �����!):
-�������� � ��������� �� �����������, ������� ���������, �����������, ������, ������� � ������ ���, �� �� ���� ��� ��� (� �.�. �� �������) � ��� ������������;
-������� �������� �������� �����, ������������ � �������� �� � ��������� ������������ �������������, ������ ������������ �����? ������� �������� � ���������� ����� ������� ����. ��������� �������� �� ���� �� ������� ��, ����� ������ (���������) �����, �� ������� � ������� ��, ������������� ��������, ���������, �������� ��������� � �.�.;
-�������� � ������� ������� - ������� ������ ��������� �������;
-������� �� ������������ �� �����, ���������. ���������� �� �����������;
-������� �������� � ����������� �����. ����������������� �������.

3.����������. ��� ���� ������������:
-����������������� ��� � ������ �� ������� � ��������� ������� ��� ���� ������������;
--"����� ������";
--"����� �����������";
--���������� ������������.

�������� ������������ ����������� (������ ��� �������� �����!):
-��������� ��������� ��� ������������ ��������������� � �������� �������������� ���������;
-��������� (��������) ����������� (����������), �� ����������� � ������ ���, ���������� ���������� ������� "� ���" � "��� ���";
-������� ������������ � �������� ��������� ��� �/��� ������������, ������ �� ��������� ��� ������������ ��������� � ����;
-������ ������ � �������������� ��� �� �������������� ������������ ��� � ��������� ����������;
-������� ������������ ����������, ������, ��������� ������ � �� �������� ��������, ������� �����, ���������� � �.�.

4.������ ��������� �������� �� �������. ������ ����� (� ����� ��) ������ ��� ������ �� "������" ����. ����� ��� ���� ����� ���� ����������.

��������� ������� � �������� 7 900 ������

���������� ����� �������� �� ���������: +7 (�95) 792-2l*22 ; 792*2|.22
------=_NextPart_000_0005_01CBE2AC.184F8CF0
Content-Type: text/html;
	charset="windows-1251"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =3D
charset=3Dwindows-1251">
<META content=3D"MSHTML 6.00.6001.18099" name=3DGENERATOR>
</HEAD>
<BODY bgColor=3D#ffffff>
<p><font color=3D"#CC0000" size=3D"3" face=3D"Arial"><strong>18 =CC=E0=F0=F2=
=E0</strong></font><br>
  <font size=3D"2" face=3D"Arial"><strong>(=EA=EE=E4 =CC=EE=F1=EA=E2=FB) =D7=
=D75/4=CE*95 \\\/// 4-=D75-4-=CE-95</strong></font></p>
<table width=3D"95%" align=3D"center" bgcolor=3D"#FFFFCC">
  <tr>
    <td><p align=3D"center"><font color=3D"#990000" size=3D"4" face=3D"Time=
s New Roman"><strong>=CD=E0=EB=EE=E3=EE=E2=EE=E5 =EF=EB=E0=ED=E8=F0=EE=E2=E0=
=ED=E8=E5: =EA=E0=EA =E6=E8=F2=FC =E1=E5=E7 =EE=E1=ED=E0=EB=E8=F7=EA=E8 =E8=
 =F4=E8=F0=EC-=EE=E4=ED=EE=E4=ED=E5=E2=EE=EA =E8 =ED=E5 =F0=E0=E7=EE=F0=E8=F2=
=FC=F1=FF, =F3=F5=EE=E4 =EE=F2 "=F7=E5=F0=ED=FB=F5" =E8 "=F1=E5=F0=FB=F5" =F1=
=F5=E5=EC, =EE=EF=F2=E8=EC=E8=E7=E0=F6=E8=FF =ED=E0=EB=EE=E3=EE=E2 =F1 =E8=F1=
=EF=EE=EB=FC=E7=EE=E2=E0=ED=E8=E5=EC =E7=E0=EA=EE=ED=ED=FB=F5 =E0=EB=FC=F2=E5=
=F0=ED=E0=F2=E8=E2=ED=FB=F5 =F1=F5=E5=EC</strong></font></p></td>
  </tr>
</table>
<p><font size=3D"2" face=3D"Arial">1.<font color=3D"#0066FF"><strong>=D7=F2=
=EE =F2=E0=EA=EE=E5 "=F7=E5=F0=ED=FB=E5" , "=F1=E5=F0=FB=E5"  =E8 "=E1=
=E5=EB=FB=E5"  =F1=F5=E5=EC=FB, =EE=E1=ED=E0=EB=E8=F7=EA=E0, =F4=E8=F0=EC=E0=
-=EE=E4=ED=EE=E4=ED=E5=E2=EA=E0 ("=EF=EE=EC=EE=E9=EA=E0" , "=ED=E5=E4=EE=E1=
=F0=EE=F1=EE=E2=E5=F1=F2=ED=FB=E9"  =E8=EB=E8 "=EF=F0=EE=E1=EB=E5=EC=ED=FB=E9=
"  =ED=E0=EB=EE=E3=EE=EF=EB=E0=F2=E5=EB=FC=F9=E8=EA, "=F4=EE=ED=E0=F0=FC"  =
=E8 =F2.=EF.). </strong></font>=CA=E0=EA =E2=FB=FF=E2=E8=F2=FC =E2=ED=E5=F8=
=ED=E5=E3=EE =EA=EE=ED=F2=F0=E0=E3=E5=ED=F2=E0-=EE=E4=ED=EE=E4=ED=E5=E2=EA=F3=
 =E8 =E8=F1=EA=EB=FE=F7=E8=F2=FC =EE=F2=ED=EE=F8=E5=ED=E8=FF =F1 =ED=E8=EC.=
<br>
  2.<strong>=CE=E1=ED=E0=EB=E8=F7=E8=E2=E0=ED=E8=E5. =C4=EB=FF =F7=E5=E3=EE=
 =E8=F1=EF=EE=EB=FC=E7=F3=E5=F2=F1=FF:</strong></font></p>
<font face=3D"Arial" size=3D"2"><ul>
  <li>"=F7=E5=F0=ED=E0=FF"  =E7=E0=F0=EF=EB=E0=F2=E0 =E8 =E4=EE=F5=EE=E4=FB=
 =F1=EE=E1=F1=F2=E2=E5=ED=ED=E8=EA=EE=E2 =E1=E8=E7=ED=E5=F1=E0;</li>
  <li>=EE=EF=EB=E0=F2=E0 =F0=E0=F1=F5=EE=E4=EE=E2, =EA=EE=F2=EE=F0=FB=E5 =ED=
=E5 =F5=EE=F7=E5=F2=F1=FF =EF=F0=EE=E2=EE=E4=E8=F2=FC =EE=F4=E8=F6=E8=E0=EB=
=FC=ED=EE;</li>
  <li>=ED=E5=E7=E0=EA=EE=ED=ED=E0=FF =E4=E5=FF=F2=E5=EB=FC=ED=EE=F1=F2=FC (=
=E2=E7=FF=F2=EA=E8, =EE=F2=EA=E0=F2=FB, =F4=E8=ED=E0=ED=F1=E8=F0=EE=E2=E0=ED=
=E8=E5 =EF=EE=EB=E8=F2=E8=F7=E5=F1=EA=EE=E9 =E4=E5=FF=F2=E5=EB=FC=ED=EE=F1=F2=
=E8;</li>
</ul></font>
<p><font color=3D"#0066FF" size=3D"2" face=3D"Arial"> <strong>=C7=E0=EA=EE=ED=
=ED=FB=E5 =E0=EB=FC=F2=E5=F0=ED=E0=F2=E8=E2=FB (=F2=EE=EB=FC=EA=EE =E4=EB=FF=
 =E7=E0=EA=EE=ED=ED=FB=F5 =F6=E5=EB=E5=E9!:</strong></font></p>
<font face=3D"Arial" size=3D"2"><ul>
  <li>=E7=E0=F0=EF=EB=E0=F2=E0 =E8 =E4=E8=E2=E8=E4=E5=ED=E4=FB =ED=E0 =F1=EF=
=E5=F6=F0=E5=E6=E8=EC=E0=F5, =E2=FB=EF=EB=E0=F2=E0 =EF=F0=EE=F6=E5=ED=F2=EE=
=E2, =EA=EE=EC=EF=E5=ED=F1=E0=F6=E8=E9, =E0=F0=E5=ED=E4=E0, =EF=EE=EA=F3=EF=
=EA=E0 =F3 =F4=E8=E7=EB=E8=F6 =D2=CC=D6, =C8=CF =ED=E0 =C5=CD=C2=C4 =E8=EB=E8=
 =D3=D1=CD (=E2 =F2.=F7. =ED=E0 =EF=E0=F2=E5=ED=F2=E5) =96 =EA=E0=EA =E8=F1=
=EF=EE=EB=FC=E7=EE=E2=E0=F2=FC; </li>
  <li>=E4=E0=F0=E5=ED=E8=E5 =F4=E8=E7=EB=E8=F6=EE=EC =ED=E0=EB=E8=F7=ED=FB=F5=
 =E4=E5=ED=E5=E3, =E7=E0=F0=E0=E1=EE=F2=E0=ED=ED=FB=F5 =E2 =EA=E0=F7=E5=F1=F2=
=E2=E5 =C8=CF =96 =EB=E5=E3=E0=EB=FC=ED=E0=FF =E0=EB=FC=F2=E5=F0=ED=E0=F2=E8=
=E2=E0 =EE=E1=ED=E0=EB=E8=F7=E8=E2=E0=ED=E8=FE, =E4=E0=FE=F9=E0=FF =E1=E5=E7=
=ED=E0=EB=EE=E3=EE=E2=FB=E9 =E4=EE=F5=EE=E4? =D2=E5=EA=F3=F9=E0=FF =F1=E8=F2=
=F3=E0=F6=E8=FF =F1 =EE=E1=EB=EE=E6=E5=ED=E8=E5=EC =F2=E0=EA=E8=F5 =E4=EE=F5=
=EE=E4=EE=E2 =CD=C4=D4=CB. =CF=EE=EB=F3=F7=E5=ED=E8=E5 =ED=E0=EB=E8=F7=ED=FB=
=F5 =EF=EE =F7=E5=EA=F3 =ED=E0 =F0=E0=F1=F5=EE=E4=FB =C8=CF, =F7=E5=F0=E5=E7=
 =EB=E8=F7=ED=FB=E5 (=EA=E0=F0=F2=EE=F7=ED=FB=E5) =F1=F7=E5=F2=E0, =EF=EE =F1=
=E4=E5=EB=EA=E0=EC =F1 =E4=F0=F3=E3=E8=EC=E8 =C8=CF, =E7=E0=ED=E8=EC=E0=FE=F9=
=E8=EC=E8=F1=FF =F0=EE=E7=ED=E8=F6=E5=E9, =EE=E1=F9=E5=EF=E8=F2=EE=EC, =F3=F1=
=EB=F3=E3=E0=EC=E8 =ED=E0=F1=E5=EB=E5=ED=E8=FE =E8 =F2.=EF.;</li>
  <li>=E7=E0=F0=EF=EB=E0=F2=E0 =E2 =E1=EE=EB=FC=F8=EE=EC =F0=E0=E7=EC=E5=F0=
=E5 =96 =ED=F3=EB=E5=E2=E0=FF =F1=F2=E0=E2=EA=E0 =F1=F2=F0=E0=F5=EE=E2=FB=F5=
 =E2=E7=ED=EE=F1=EE=E2;</li>
  <li>=EF=EB=E0=F2=E5=E6=E8 =EE=F2 =ED=E5=F0=E5=E7=E8=E4=E5=ED=F2=EE=E2 =ED=
=E0 =EA=E0=F0=F2=FB, =EE=F1=ED=EE=E2=E0=ED=E8=FF. =C0=F3=F2=F1=F2=E0=F4=E8=ED=
=E3 =EE=F2 =ED=E5=F0=E5=E7=E8=E4=E5=ED=F2=E0;</li>
  <li>=EF=E5=F0=E5=E2=EE=E4 =F0=E0=F1=F5=EE=E4=EE=E2 =E2 =E1=E5=E7=ED=E0=EB=
=E8=F7=ED=F3=FE =F4=EE=F0=EC=F3. =CF=F0=E5=E4=F1=F2=E0=E2=E8=F2=E5=EB=FC=F1=
=EA=E8=E5 =F0=E0=F1=F5=EE=E4=FB.</li>
</ul></font>
<p><font size=3D"2" face=3D"Arial">3.<strong>=CE=E4=ED=EE=E4=ED=E5=E2=EA=E8=
 =C4=EB=FF =F7=E5=E3=EE =E8=F1=EF=EE=EB=FC=E7=F3=FE=F2=F1=FF:</strong></fo=
nt></p>
<font face=3D"Arial" size=3D"2"><ul>
  <li>=EF=F1=E5=E2=E4=EE=EE=EF=F2=E8=EC=E8=E7=E0=F6=E8=FF =CD=C4=D1 =E8 =ED=
=E0=EB=EE=E3=E0 =ED=E0 =EF=F0=E8=E1=FB=EB=FC =E2 =EE=F2=E4=E5=EB=FC=ED=FB=F5=
 =F1=E4=E5=EB=EA=E0=F5 =E8=EB=E8 =E2=F1=E5=E9 =E4=E5=FF=F2=E5=EB=FC=ED=EE=F1=
=F2=E8;=20
    <ul>
      <li>"=F1=E5=F0=FB=E9 =E8=EC=EF=EE=F0=F2" ;</li>
      <li>"=F1=E5=F0=E0=FF =EA=EE=ED=E2=E5=F0=F2=E0=F6=E8=FF" ;</li>
      <li>=ED=E5=E7=E0=EA=EE=ED=ED=E0=FF =E4=E5=FF=F2=E5=EB=FC=ED=EE=F1=F2=FC=
 </li>
    </ul>
  </li>
</ul></font>
<p><font color=3D"#0066FF" size=3D"2" face=3D"Arial"><strong>=C7=E0=EA=EE=ED=
=ED=FB=E5 =E0=EB=FC=F2=E5=F0=ED=E0=F2=E8=E2=FB =EE=E4=ED=EE=E4=ED=E5=E2=EA=E0=
=EC (=F2=EE=EB=FC=EA=EE =E4=EB=FF =E7=E0=EA=EE=ED=ED=FB=F5 =F6=E5=EB=E5=E9!=
: </strong></font></p>
<font face=3D"Arial" size=3D"2"><ul>
  <li>=E7=E0=F2=F0=E0=F2=ED=FB=E5 =EC=E5=F5=E0=ED=E8=E7=EC=FB =E8=EB=E8 =F2=
=F0=E0=ED=F1=F4=E5=F0=F2=ED=EE=E5 =F6=E5=ED=EE=EE=E1=F0=E0=E7=EE=E2=E0=ED=E8=


Code:
2011-03-15 01:58:40 Received from <> R=1PzIao-0003be-Jk U=mail P=local S=13562 T="Mail delivery failed: returning message to sender"
2011-03-15 01:58:41 SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail.weblove.in.ua [77.120.97.124]: 550 Unknown user
2011-03-15 01:58:41 [email protected] F=<> R=lookuphost T=remote_smtp: SMTP error from remote mail server after RCPT TO:<[email protected]>: host mail.weblove.in.ua [77.120.97.124]: 550 Unknown user
*** Frozen (delivery error message)

Hope those information should be helpful.

Regards
 
Is that entry for an incoming email?

If so, that's rather confusing... for whatever reason, it would be doing a delivery outbound for the inbound email. The "check_limit" is only for outbound deliveries.

Is there a forwarder setup on that account?
Is the sender verify enabled? (I tested it, but didn't get the unknown case, so not sure what the difference is here)

John

Yes it's an incoming email, hense the F=nonlocaldomain, the local email account is a forwarder to an external email account though. But still shouldn't be blocked since the user the forwarding account belongs to hasn't reached his limit.
 
Hello,

Agreed and I prefer not to use that method. Right now, I need to know what context that message was generated from so we can fix it. Currently, I'm not able to generate the "unknown" case, so need to know where it comes from.. how it's generated, who sent it, etc..

The confusing part (assuming you've got a semi-recent exim.pl) is that there *should* be a unknown.bytes log. The creation of usage/unkown is a subset of the function that creates usage/unknown.bytes. If unknown.bytes isn't present, I couldn't give you a reason why.. perhaps ensure you've got the absolute latest exim.pl so we're looking at the same thing. The most recent version will have "#VERSION=8" at the top.

There was a very brief window of time (I believe less than a day) where the exim.pl would abort if the "unknown" case was used, but that was quickly changed back after it was determined that this was not the sender-verify case. It's possible that's the exim.pl you've got. Grab VERSION=8 either way.

John

Code:
chi:~# head /etc/exim.pl
#!/usr/bin/perl

#VERSION=8

#smtpauth
#called by exim to verify if an smtp user is allowed to
#send email through the server
#possible success:
# user is in /etc/virtual/domain.com/passwd and password matches
# user is in /etc/passwd and password matches in /etc/shadow
chi:~# ls -al /etc/virtual/usage/richard*
-rw-rw---- 1 root mail     39 2011-03-16 11:14 /etc/virtual/usage/richard
-rw-rw---- 1 root mail 112916 2011-03-16 11:15 /etc/virtual/usage/richard.bytes
chi:~# ls -al /etc/virtual/usage/unknown*
-rw-rw---- 1 root mail 58 2011-03-16 11:16 /etc/virtual/usage/unknown

So definately no unkown.bytes file, any ideas what could cause this?
 
Hello,

Thanks for the info. By the looks of it, it's a bounce, generated from the remote box (where the forwarder is going). This would be somewhat of a backscatter case, since exim has already accepted the email (because the alias exists), but is stuck with the message after it tries to forward it, but the remote box rejects it. It's left with the message, and needs to send it back to the sender.. and that's probably why the exim.pl can't figure out who it belongs to.. because exim itself generated it. I'll try and duplicate this case to see what I can do for the exim.pl.

As for the missing bytes, I've looked at it harder, and there are cases where the bytes file isn't created. They're listed within the "log_bandwidth" function.. any bit that calls "return;" before the file is written will be those cases, eg:

my $name = getpwuid($uid);
if (uid_exempt($uid)) { return; }
if ($name eq "") { return; }
my $bytes = Exim::expand_string('$message_size');
if ($bytes == -1) { return; }

I'll check to see which of those is being hit (I'm guessing the $name eq "" is it, since that same call is where the 'unknown' comes from);

On a side-note, this may help prevent backscatter:
http://help.directadmin.com/item.php?id=357

John
 
Update: I've found why there was no unknown.bytes, and updated the exim.pl again so that creates the unknown.bytes. Update to get the latest.

I've also found the cause of the unknown case, and it's caused by this variable:
Exim::expand_string('$sender_address');

being set to the original sender of the email to the forwarder, which is an external domain.
This check is the "last restort" of the exim.pl as it checks many other things first, like the running uid, the authenticated username, current working directory, and only resorts to the sender at the very end.

In any case, we have a stronger case that this will only happen during message bounces.... but the question now remains, what do we want this case to do?

Option 1) Allow all unknown cases to have no limit, and send freely. This will ensure people get the bounce as to why their email didn't get sent, but is also bad as a spoofed sender will generate backscatter.

Option 2) Limit this case like all others, as it will be preventing backscatter (after the limit is hit), but still allow bounces before the limit it hit.


At this time, it seems like option 2 might be the best solution because:
- it's already done..
- backscatter is bad and should be blocked anyway

Feedback welcome.

John
 
Back
Top