[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [K12OSN] weird maillog

Hey Barry,
I don't have any unknown virtusers.  But I was able to recreate the
same kind of log entry with telnet.  from another connection I did:

telnet [server] 110
user jim@
pass stuff

and the log entry looks the same.

May 23 17:41:30 mail vpopmail[7620]: vchkpw-pop3: vpopmail user not
found jim@:xx.xx.xx.xx

So it's not an internal problem i think, just some bot looking for
valid users.  Still I wonder if I can use somethinkg like fail2ban.  I
have a feeling that's what cause the imap sever error.


On 5/23/07, Barry Cisna <brcisna eazylivin net> wrote:

I've never used Qmail, but if I seen this error in Dovecot IMAP/POP
server, Id say somehow,there is a "virtuser" setting in your qmail.config
that is pointing to the IP address that is listed in your maillog.
Open your Qmail.conf file in text editor and search for the IP address
listed in your maillog,for a starting point.
Let us know if you advance any further:),,

Barry Cisna

K12OSN mailing list
K12OSN redhat com
For more info see <http://www.k12os.org>

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]