OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
A little bit confusing...

From: Rocco Scappatura (Rocco.Scappaturasttspa.it)
Date: Wed Nov 14 2007 - 04:07:16 CST


Hello,

I manage an SMTP relay server that receives email for a domain
'domain.it' an try to deliver it to a mail server that receives email
for 'domain.it'.

My local domain is 'av3.mydomain.it'.

I can't figure out why a lot of message from postmaster toward users of
my email domain that I'm responsible to, are sent (or apparently are
sent).

For example:

# cat /var/log/mail | grep postmaster
.
.
.
Nov 14 10:53:18 av3 postfix/qmgr[23784]: 37A0A75022E:
from=<postmasterav3.mydomain.it>, size=257, nrcpt=1 (queue active)

av3:~ # cat /var/log/mail | grep 37A0A75022E
Nov 14 10:53:18 av3 postfix/cleanup[21989]: 37A0A75022E:
message-id=<20071114095318.37A0A75022Eav3.mydomain.it>
Nov 14 10:53:18 av3 postfix/qmgr[23784]: 37A0A75022E:
from=<postmasterav3.mydomain.it>, size=257, nrcpt=1 (queue active)
Nov 14 10:53:18 av3 postfix/smtp[20128]: 37A0A75022E:
to=<tra.scherlindomain.it>, relay=10.30.32.7[10.30.32.7]:25,
delay=0.17, delays=0.07/0/0.07/0.03, dsn=5.0.0, status=undeliverable
(host 10.30.32.7[10.30.32.7] said: 550 tra.scherlindomain.it... No such
user (in reply to RCPT TO command))
Nov 14 10:53:18 av3 postfix/qmgr[23784]: 37A0A75022E: removed

Nov 14 10:53:18 av3 postfix/smtpd[19838]: NOQUEUE: reject: RCPT from
as-0-21.lns2-4c.kharkov.ukrtel.net[82.207.32.21]: 450 4.1.1
<tra.scherlindomain.it>: Recipient address rejected: undeliverable
address: host 10.30.32.7[10.30.32.7] said: 550 tra.scherlindomain.it...
No such user (in reply to RCPT TO command); from=<jquiredcr.net>
to=<tra.scherlindomain.it> proto=SMTP helo=<goliat.espol.edu.ec>
Nov 14 10:53:18 av3 postfix/smtp[20128]: 37A0A75022E:
to=<tra.scherlindomain.it>, relay=10.30.32.7[10.30.32.7]:25,
delay=0.17, delays=0.07/0/0.07/0.03, dsn=5.0.0, status=undeliverable
(host 10.30.32.7[10.30.32.7] said: 550 tra.scherlindomain.it... No such
user (in reply to RCPT TO command))

And so..:

av3:~ # cat /var/log/mail | grep 37A0A75022E
Nov 14 10:53:18 av3 postfix/cleanup[21989]: 37A0A75022E:
message-id=<20071114095318.37A0A75022Eav3.mydomain.it>
Nov 14 10:53:18 av3 postfix/qmgr[23784]: 37A0A75022E:
from=<postmasterav3.mydomain.it>, size=257, nrcpt=1 (queue active)
Nov 14 10:53:18 av3 postfix/smtp[20128]: 37A0A75022E:
to=<tra.scherlindomain.it>, relay=10.30.32.7[10.30.32.7]:25,
delay=0.17, delays=0.07/0/0.07/0.03, dsn=5.0.0, status=undeliverable
(host 10.30.32.7[10.30.32.7] said: 550 tra.scherlindomain.it... No such
user (in reply to RCPT TO command))
Nov 14 10:53:18 av3 postfix/qmgr[23784]: 37A0A75022E: removed

That is, It seems to me that I (postmaster) try to send a DNS (I
suppose) to inxistent email address 'tra.scherlindomain.it' to say
that some one has tried to send it an email, but that message has been
nevere delivered, because it do not exists (a clearly paradoxical
situation).

Moreover, postmaster is not notified that in truth someone has tried to
sent an email to an inexistent email address of a domain which he is
responsible!!

Where is the trick? Do I miss some logical step or is there any mistake?

Thanks,

rocsca