abnormal email sent
what does it mean?
SMTP connection identification H=localhost A=127.0.0.1 P=48514 U=root ID=0 S=root B=identify_local_connection
more log
2017-01-08 11:32:49 SMTP connection from [127.0.0.1]:48508 (TCP/IP connection count = 1)
2017-01-08 11:32:49 SMTP connection identification H=localhost A=127.0.0.1 P=48508 U=root ID=0 S=root B=identify_local_connection
2017-01-08 11:32:49 H=(ssd2.hostname) [127.0.0.1]:48508 sender verify fail for : Unrouteable address
2017-01-08 11:32:49 H=(ssd2.hostname) [127.0.0.1]:48508 F= rejected RCPT : Sender verify failed
2017-01-08 11:32:50 unexpected disconnection while reading SMTP command from (ssd2.hostname) [127.0.0.1]:48508
2017-01-08 11:32:50 SMTP connection from [127.0.0.1]:48514 (TCP/IP connection count = 1)
2017-01-08 11:32:50 SMTP connection identification H=localhost A=127.0.0.1 P=48514 U=root ID=0 S=root B=identify_local_connection
2017-01-08 11:32:50 unexpected disconnection while reading SMTP command from (ssd2.hostname) [127.0.0.1]:48514
2017-01-08 11:33:04 SMTP connection from [127.0.0.1]:48528 (TCP/IP connection count = 1)
2017-01-08 11:33:05 SMTP connection identification H=localhost A=127.0.0.1 P=48528 U=root ID=0 S=root B=identify_local_connection
2017-01-08 11:33:05 127.0.0.1 in /etc/alwaysrelay trusting sender_address_domain of: userdomain.net
-
Hi, First, it is a good idea to get to know the following symbols: <= (When the email arrives to the server from outside email server Or ) => (When the email goes to the outside email server) -> (additional address in same delivery) *> (delivery suppressed by -N) ** (delivery failed; address bounced) == (delivery deferred; temporary problem) First line : It will provide you the email server from where the email has been sent it may be your localhost (i.e. 127.0.0.1 mostly for outgoing emails) or any other IP Second Line : The next item on the in this line starts with "H=". This specifies the hostname of the server that the mail originates from. Third Line : Showing the internal email message ID after immediately to the start of date and time. Also it contains the " <=" symbol means the email is the outgoing email from the server from the email address test@domain.com[/EMAIL] alongwith the authentication of email account (see A=courier_login) shows that which webmail client (squirrel)has used. It also contains the subject of the email and the recipient address. Fourth Line : Email connectioin from the email client for that internal email ID is being closed. Fifth Line : The email is being in queue in the /var/spool/exim Sixth Line : Mail server sent the connection request to the recipient email server and this is mentioned as outbond email connection (Connection Establishment). Sevent Line : Once the connection is established to the remote email server the email being sent to the recipient. Eight Line : Completed means the emails is being sent successfully Thank you, 0 -
-01-08 11:32:49 H=(ssd2.hostname) [127.0.0.1]:48508 sender verify fail for : Unrouteable address
Hello, Does the "info@userdomain" email account exist on this system, and does "userdomain.it" exist in the /etc/localdomains file? Thank you.0
Please sign in to leave a comment.
Comments
2 comments