OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Connection refused?

From: Stefan Jakobs (stefan.jakobsrus.uni-stuttgart.de)
Date: Thu May 29 2008 - 03:23:26 CDT


On Wednesday 28 May 2008 14:28, Wietse Venema wrote:
> Stefan Jakobs:
> > May 28 10:35:35 relay postfix/smtpd[1445]: NOQUEUE: reject: RCPT from
> > unknown[221.195.CCC.DDD]: 450 4.1.1 <germydomain.tld>:
> > Recipient address rejected: unverified address: delivery temporarily
> > suspended: connect to mbox.mydomain.tld[192.168.1.10]: Connection
> > refused; from=<billowiestictsomedomain.org>
> > to=<germydomain.tld> proto=ESMTP helo=<[221.195.CCC.DDD]>
>
> Why does host mbox.mydomain.tld send TCP RSET in reply to TCP SYN?

I don't know. Can it be some kind of connection rate limit? How can I
investigate this further?
 
> > and now what mbox has in its log:
> >
> > 2008-05-28_10-33.log:35:35.91 1 ROUTER germydomain.tld
> > rejected by SYSTEM: Error Code=unknown user account
> > 2008-05-28_10-33.log:10:35:35.91 1
> > SMTPI-76574(relay.mydomain.tld) Recipient
> > germydomain.tld rejected: unknown user account
>
> Why does mbox.mydomain.tld not recognize its own users as valid?

Relay.mydomain.tld don't know the users of mbox.mydomain.tld. That's why it
does recipient verification and "asks" mbox.mydomain.tld.

> Wietse

Thanks for your help.
Stefan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQBIPmf+BiHtkFOLX+gRAoC4AJ0Rcp/xc3fSFSQVwgoXJ34OoFicfgCeINc+
sWP3+mtCiPuBN1oLkp6grFc=
=I6zC
-----END PGP SIGNATURE-----