Author |
|
berapp Newbie
Joined: 08 July 2021
Online Status: Offline Posts: 3
|
Posted: 08 July 2021 at 9:39am | IP Logged
|
|
|
I'm running a postfix server that relays emails from software using MailBee 11.2.0.599. Occasionally the emails sitting in the outgoing folder are renamed from .EML to .BAD. When I look at the logs on my mail server I see entries like this:
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: connect from unknown[10.203.1.10]
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: smtp_stream_setup: maxtime=300 enable_deadline=0
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: > unknown[10.203.1.10]: 220 kingaire.northtrailrv.com ESMTP Postfix (Ubuntu)
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: < unknown[10.203.1.10]: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_string: smtpd_forbidden_commands: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ~? connect
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_string: smtpd_forbidden_commands: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ~? get
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_string: smtpd_forbidden_commands: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ~? post
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_list_match: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX: no match
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: > unknown[10.203.1.10]: 502 5.5.2 Error: command not recognized
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: < unknown[10.203.1.10]: X?
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_string: smtpd_forbidden_commands: x ~? connect
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_string: smtpd_forbidden_commands: x ~? get
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_string: smtpd_forbidden_commands: x ~? post
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_list_match: X: no match
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: > unknown[10.203.1.10]: 502 5.5.2 Error: command not recognized
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: < unknown[10.203.1.10]: XXXXXXXXXXX
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_string: smtpd_forbidden_commands: xxxxxxxxxxx ~? connect
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_string: smtpd_forbidden_commands: xxxxxxxxxxx ~? get
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_string: smtpd_forbidden_commands: xxxxxxxxxxx ~? post
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: match_list_match: XXXXXXXXXXX: no match
Jul 5 07:30:53 kingaire postfix/smtpd[14677]: > unknown[10.203.1.10]: 502 5.5.2 Error: command not recognized
Jul 5 07:35:53 kingaire postfix/smtpd[14677]: smtp_get: timeout
Jul 5 07:35:53 kingaire postfix/smtpd[14677]: > unknown[10.203.1.10]: 421 4.4.2 kingaire.northtrailrv.com Error: timeout exceeded
Jul 5 07:35:53 kingaire postfix/smtpd[14677]: timeout after UNKNOWN from unknown[10.203.1.10]
Jul 5 07:35:53 kingaire postfix/smtpd[14677]: disconnect from unknown[10.203.1.10] unknown=0/3 commands=0/3
|
Back to Top |
|
|
berapp Newbie
Joined: 08 July 2021
Online Status: Offline Posts: 3
|
Posted: 08 July 2021 at 9:43am | IP Logged
|
|
|
Note the X's are not from me redacting information. That's exactly how it appears in the log.
|
Back to Top |
|
|
Alex AfterLogic Support
Joined: 19 November 2003
Online Status: Offline Posts: 2206
|
Posted: 08 July 2021 at 10:32am | IP Logged
|
|
|
If your mail server redacts the data in the logs, it's hard to tell. Maybe there is a way to suppress this in there.
Regards,
Alex
|
Back to Top |
|
|
berapp Newbie
Joined: 08 July 2021
Online Status: Offline Posts: 3
|
Posted: 08 July 2021 at 11:16am | IP Logged
|
|
|
It's not the mail server doing that. That's what seems to be coming from MailBee.
Here is the greeting from the server
[14677]: > unknown[10.203.1.10]: 220 kingaire.northtrailrv.com ESMTP Postfix (Ubuntu)
Followed by the first command from MailBee
[14677]: < unknown[10.203.1.10]: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Followed by the server saying, "What?"
[14677]: > unknown[10.203.1.10]: 502 5.5.2 Error: command not recognized
Followed by MailBee saying, "X"
[14677]: < unknown[10.203.1.10]: X?
And the server once again saying, "WHAT?"
14677]: > unknown[10.203.1.10]: 502 5.5.2 Error: command not recognized
|
Back to Top |
|
|
Alex AfterLogic Support
Joined: 19 November 2003
Online Status: Offline Posts: 2206
|
Posted: 09 July 2021 at 1:02am | IP Logged
|
|
|
MailBee cannot do that (unless you're explicitly sending such commands). Maybe there is some software in the middle.
Regards,
Alex
|
Back to Top |
|
|