OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: large amounts of disconnects

From: Michael Wang (postfix-userpandadesigns.com)
Date: Mon Jan 01 2007 - 06:52:28 CST


Roman Novak - roman.novakiskrasistemi.si wrote:
> Hello.
>
> In last 2 weeks i am noticing enormous amounts of strange connections
> to mail server from all over the world. An example from logs:
>
> Jan 1 13:09:03 mercury postfix/smtpd[22974]: connect from
> 157.Red-81-33-236.dynamicIP.rima-tde.net[81.33.236.157]
> Jan 1 13:09:03 mercury postfix/smtpd[22974]: lost connection after EHLO
> from 157.Red-81-33-236.dynamicIP.rima-tde.net[81.33.236.157]
> Jan 1 13:09:03 mercury postfix/smtpd[22974]: disconnect from
> 157.Red-81-33-236.dynamicIP.rima-tde.net[81.33.236.157]
>
>
> Transcript of session follows.
>
> Out: 220 mercury.mydomain.net ESMTP something
> In: EHLO
> Out: 501 Syntax: EHLO hostname
>
> Session aborted, reason: lost connection

Do you have reject_invalid_helo_hostname or reject_invalid_hostname
somewhere in your main.cf file?

--
Michael Wang