Strange relay messages in qmail mailserver

Shawn Tayler stayler
Sat Feb 5 00:12:13 PST 2005


Hi Guys,

I have a qmail mail server thats getting pretty busy with the junk email
bounces.  I noticed in /var/log/messages that msgs were being relayed via
127.0.0.2 and 3.  I have pop before smtp installed and 127.* was allowed
for relay.  I cut it back to simply 127.0.0.1 and there are a few attempts
from the other addresses still, but they are failing now.

Have any of you ever seen this sort of behavoir on a mail system?  I can't
find anything running on the system and my other qmail box, although not
near as busy does not show the same behavoir.

Also, how could someone get 127.0.0.2 or three to a box either locally or
via the port 25, forwarded from the fire wall.  I guess I'm a bit
befuddled.  

Suggestions on where to look?

Shawn


More information about the Linux-users mailing list