translation requested

jechilt

Verified User
Joined
Jun 21, 2004
Messages
212
I have noticed quite a few entries in my email logs that are similar to this:
Code:
2004-10-16 11:47:22 H=(your-ykj3fdh0wj) [211.190.43.168] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-10-16 11:47:22 H=(your-ykj3fdh0wj) [211.190.43.168] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-10-16 11:47:24 H=(your-ykj3fdh0wj) [211.190.43.168] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-10-16 11:47:24 H=(your-ykj3fdh0wj) [211.190.43.168] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-10-16 11:47:24 H=(your-ykj3fdh0wj) [211.190.43.168] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-10-16 11:47:24 H=(your-ykj3fdh0wj) [211.190.43.168] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-10-16 
----
2004-10-14 20:24:03 H=(66.55.138.143) [219.91.120.67] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
---
2004-10-12 08:56:13 H=(xetian-note) [61.111.140.233] F=<[email protected]> rejected RCPT [email][email protected][/email]: authentication required
2004-10-12 08:56:13 H=(xetian-note) [61.111.140.233] F=<[email protected]> rejected RCPT [email][email protected][/email]: authentication required
2004-10-12 08:56:13 H=(xetian-note) [61.111.140.233] F=<[email protected]> rejected RCPT [email][email protected][/email]: authentication required
2004-10-12 08:56:13 H=(xetian-note) [61.111.140.233] F=<[email protected]> rejected RCPT [email][email protected][/email]: authentication required

1. Is this something I need to be concerned of? From what I can tell these attempts were not successful because authentification is required.

2. Is there an easy way to block these by IP or domain name?

thanks!
 
jechilt said:
I have noticed quite a few entries in my email logs that are similar to this:
Code:
2004-10-16 11:47:22 H=(your-ykj3fdh0wj) [211.190.43.168] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
Someone in China is trying to relay spam through your server.
1. Is this something I need to be concerned of?
Not really.
From what I can tell these attempts were not successful because authentification is required.
That's correct.
2. Is there an easy way to block these by IP or domain name?
Sure, but then they'll appear in a different log.

Jeff
 
Back
Top