Unix Technical Forum

strange log entry

This is a discussion on strange log entry within the Slackware Linux Support forums, part of the Unix Operating Systems category; --> Aug 12 10:30:52 turncoat postfix/qmgr[23763]: F02CB2AF4F: from=<nobody@turncoat.area420.net>, size=443, nrcpt=1 (queue active) Aug 12 10:31:22 turncoat postfix/smtp[24919]: connect to example.com[192.0.34.166]: ...


Go Back   Unix Technical Forum > Unix Operating Systems > Slackware Linux Support

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-19-2008, 02:40 PM
Scott Eberl
 
Posts: n/a
Default strange log entry

Aug 12 10:30:52 turncoat postfix/qmgr[23763]: F02CB2AF4F:
from=<nobody@turncoat.area420.net>, size=443, nrcpt=1 (queue active)
Aug 12 10:31:22 turncoat postfix/smtp[24919]: connect to
example.com[192.0.34.166]: Connection timed out (port 25)
Aug 12 10:31:22 turncoat postfix/smtp[24919]: F02CB2AF4F:
to=<you@example.com>, relay=none, delay=256173, status=deferred (connect
to example.com[192.0.34.166]: Connection timed out)

I have checked everything I can think of. Nothing in the postfix configs
show this what I need to know is can I search every file on my machine
for the string "example.com[192.0.34.165]" This is getting set somewhere
but I can't seem to find it.


Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 02-19-2008, 02:40 PM
Keith Matthews
 
Posts: n/a
Default Re: strange log entry

Scott Eberl wrote:

> Aug 12 10:30:52 turncoat postfix/qmgr[23763]: F02CB2AF4F:
> from=<nobody@turncoat.area420.net>, size=443, nrcpt=1 (queue active)
> Aug 12 10:31:22 turncoat postfix/smtp[24919]: connect to
> example.com[192.0.34.166]: Connection timed out (port 25)
> Aug 12 10:31:22 turncoat postfix/smtp[24919]: F02CB2AF4F:
> to=<you@example.com>, relay=none, delay=256173, status=deferred (connect
> to example.com[192.0.34.166]: Connection timed out)
>
> I have checked everything I can think of. Nothing in the postfix configs
> show this what I need to know is can I search every file on my machine
> for the string "example.com[192.0.34.165]" This is getting set somewhere
> but I can't seem to find it.


What does mailq say ?

There's probably something else but let's start with the simple stuff.

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 02-19-2008, 02:40 PM
Scott Eberl
 
Posts: n/a
Default Re: strange log entry

On 2004-08-12, Keith Matthews <invalid@frequentous.co.uk> wrote:
> Scott Eberl wrote:
>
>> Aug 12 10:30:52 turncoat postfix/qmgr[23763]: F02CB2AF4F:
>> from=<nobody@turncoat.area420.net>, size=443, nrcpt=1 (queue active)
>> Aug 12 10:31:22 turncoat postfix/smtp[24919]: connect to
>> example.com[192.0.34.166]: Connection timed out (port 25)
>> Aug 12 10:31:22 turncoat postfix/smtp[24919]: F02CB2AF4F:
>> to=<you@example.com>, relay=none, delay=256173, status=deferred (connect
>> to example.com[192.0.34.166]: Connection timed out)
>>
>> I have checked everything I can think of. Nothing in the postfix configs
>> show this what I need to know is can I search every file on my machine
>> for the string "example.com[192.0.34.165]" This is getting set somewhere
>> but I can't seem to find it.

>
> What does mailq say ?
>
> There's probably something else but let's start with the simple stuff.
>


Well thats an interesting question since my mailq doesnt seem to excist.
Its a link to sendmail. I followed the postfix install doc and it said
to rename it to postfix.mailq
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 02-19-2008, 02:40 PM
William Hunt
 
Posts: n/a
Default Re: strange log entry

On Thu, 12 Aug 2004, Scott Eberl wrote:
> Aug 12 10:30:52 turncoat postfix/qmgr[23763]: F02CB2AF4F:
> from=<nobody@turncoat.area420.net>, size=443, nrcpt=1 (queue active)
> Aug 12 10:31:22 turncoat postfix/smtp[24919]: connect to
> example.com[192.0.34.166]: Connection timed out (port 25)
> Aug 12 10:31:22 turncoat postfix/smtp[24919]: F02CB2AF4F:
> to=<you@example.com>, relay=none, delay=256173, status=deferred (connect
> to example.com[192.0.34.166]: Connection timed out)
>
> I have checked everything I can think of. Nothing in the postfix configs
> show this what I need to know is can I search every file on my machine
> for the string "example.com[192.0.34.165]" This is getting set somewhere
> but I can't seem to find it.


idunno but i'm not so sure 'example.com' is text from your machine.
first note the ip# 192.0.34.166 is a legit number. do something
like 'dig example.com' and lo, A 192.0.34.166.

name[number] notation often means 'name' is what's been given (HELO)
and number is ip# of actual connection.

it looks like your machine is trying to send mail to you@example.com,
and example.com is answering the HELO but ignoring you after that.





--
Fire the Liars - Impeach Bush and Cheney!
Prosecute the criminals - Indict Rumsfeld and Ashcroft!
Corruption starts at the top.

William Hunt, Portland Oregon USA
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 02-19-2008, 02:40 PM
Keith Matthews
 
Posts: n/a
Default Re: strange log entry

Scott Eberl wrote:

> On 2004-08-12, Keith Matthews <invalid@frequentous.co.uk> wrote:
>> Scott Eberl wrote:
>>
>>> Aug 12 10:30:52 turncoat postfix/qmgr[23763]: F02CB2AF4F:
>>> from=<nobody@turncoat.area420.net>, size=443, nrcpt=1 (queue active)
>>> Aug 12 10:31:22 turncoat postfix/smtp[24919]: connect to
>>> example.com[192.0.34.166]: Connection timed out (port 25)
>>> Aug 12 10:31:22 turncoat postfix/smtp[24919]: F02CB2AF4F:
>>> to=<you@example.com>, relay=none, delay=256173, status=deferred (connect
>>> to example.com[192.0.34.166]: Connection timed out)
>>>
>>> I have checked everything I can think of. Nothing in the postfix configs
>>> show this what I need to know is can I search every file on my machine
>>> for the string "example.com[192.0.34.165]" This is getting set somewhere
>>> but I can't seem to find it.

>>
>> What does mailq say ?
>>
>> There's probably something else but let's start with the simple stuff.
>>

>
> Well thats an interesting question since my mailq doesnt seem to excist.
> Its a link to sendmail. I followed the postfix install doc and it said
> to rename it to postfix.mailq



How did you install ?

Wietse includes a very good build script that does just about everything
(assuming you don't use the pre-built packages from www.linuxpackages.net).
If you did the whole thing by hand there's a fair chance you screwed
something up.

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #6 (permalink)  
Old 02-19-2008, 02:41 PM
William Hunt
 
Posts: n/a
Default Re: strange log entry

On Thu, 12 Aug 2004, William Hunt wrote:
> On Thu, 12 Aug 2004, Scott Eberl wrote:
>> Aug 12 10:30:52 turncoat postfix/qmgr[23763]: F02CB2AF4F:
>> from=<nobody@turncoat.area420.net>, size=443, nrcpt=1 (queue active)
>> Aug 12 10:31:22 turncoat postfix/smtp[24919]: connect to
>> example.com[192.0.34.166]: Connection timed out (port 25)
>> Aug 12 10:31:22 turncoat postfix/smtp[24919]: F02CB2AF4F:
>> to=<you@example.com>, relay=none, delay=256173, status=deferred (connect
>> to example.com[192.0.34.166]: Connection timed out)

[...]
> it looks like your machine is trying to send mail to you@example.com,
> and example.com is answering the HELO but ignoring you after that.


oof, no - your machine is trying to send mail to you@example.com,
pulled the ip# out of DNS, tried to open SMTP and finally timed out
because example.com is happily ignoring you.









--
Fire the Liars - Impeach Bush and Cheney!
Prosecute the criminals - Indict Rumsfeld and Ashcroft!
Corruption starts at the top.

William Hunt, Portland Oregon USA
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 10:39 AM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.2.0
www.UnixAdminTalk.com