OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: large amounts of disconnects

From: Peter Matulis (petermatulisyahoo.ca)
Date: Mon Jan 01 2007 - 12:30:29 CST

--- "Roman Novak - roman.novakiskrasistemi.si"
<roman.novakiskrasistemi.si> wrote:

>
> Michael Wang wrote:
> > Roman Novak - roman.novakiskrasistemi.si wrote:
> >> Michael Wang wrote:
> >>> Roman Novak wrote:
> >>>> Transcript of session follows.
> >>>>
> >>>> Out: 220 mercury.mydomain.net ESMTP something
> >>>> In: EHLO
> >>>> Out: 501 Syntax: EHLO hostname
> >>>>
> >>>> Session aborted, reason: lost connection
> >>>
> >>> Do you have reject_invalid_helo_hostname or
> reject_invalid_hostname
> >>> somewhere in your main.cf file?
> >>
> >> No, i don't have these parameters in main.cf
> >
> > Show us your postconf -n output.
> >
>
> [rootmercury ~]# postconf -n

[...]

> notify_classes = delay, protocol, resource, software

Remove 'protocol' from the above setting.

From the docs:

protocol
Send the postmaster a transcript of the SMTP session in case of client
or server protocol errors.

The bot is committing a protocol error.

Peter

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com