Logwatch sendmail errors... What does it mean ? - Discuss

25 Oct 2006


      Hi,
I run a fully updated CentOS 4.4 machine. This morning I got the errors
below in my daily Logwatch report (Sendmail part). What has happend? Just
some new bogus spammer that cant get the protocol right or is the server
under attack? I have googled around but cannot fins any answer or I just
suck at googleing...
Any ideas ?
Jens
--------------------- sendmail Begin ------------------------
SEVERE ERRORS
 -------------
System Error Messages:
     timeout writing message to poczta.orange.pl.: Broken pipe: 5 Time(s)
Total SEVERE ERRORS:  5
**Unmatched Entries**
      6: fl=0x8000, mode=100640: dev=3/1, ino=11748389, nlink=1, u/gid=0/0,
size=12288: 5 Time(s)
      2: fl=0x1, mode=20666: CHR: dev=0/13, ino=1810, nlink=1, u/gid=0/0,
size=0: 5
Time(s)
      0: fl=0x0, mode=20666: CHR: dev=0/13, ino=1810, nlink=1, u/gid=0/0,
size=0: 5
Time(s)
      1: fl=0x1, mode=20666: CHR: dev=0/13, ino=1810, nlink=1, u/gid=0/0,
size=0: 5
Time(s)
     12: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0,
size=12288: 4 Time(s)
     11: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0,
size=12288: 4 Time(s)
    MCI@0x0: NULL: 4 Time(s)
      3: fl=0x2, mode=140777: SOCK localhost->[[UNIX: /dev/log]]: 4 Time(s)
      7: fl=0x8000, mode=100640: dev=3/1, ino=11748389, nlink=1, u/gid=0/0,
size=12288: 4 Time(s)
      5: fl=0x0, mode=100600: dev=3/65, ino=15007748, nlink=1, u/gid=0/51,
size=4190579: 4 Time(s)
      4: fl=0x2, mode=100600: dev=3/65, ino=14794755, nlink=1, u/gid=0/51,
size=1632: 2 Time(s)
    MCI@0x92dfa44:
flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000,
phase=client
DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl.,
lastuse=Tue Oct 24 22:13:37 2006\n: 1 Time(s)
     10: fl=0x8000, mode=100640: dev=3/1, ino=11748385, nlink=1, u/gid=0/51,
size=12288: 1 Time(s)
      9: fl=0x802, mode=140777: SOCK xxx.tld/42800->(Transport
endpoint is not connected): 1 Time(s)
     14: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0,
size=12288: 1 Time(s)
    MCI@0x92dfa44:
flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000,
phase=client
DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl.,
lastuse=Tue Oct 24 21:58:37 2006\n: 1 Time(s)
      5: fl=0x8000, mode=100640: dev=3/1, ino=11748389, nlink=1, u/gid=0/0,
size=12288: 1 Time(s)
     15: fl=0x8000, mode=100640: dev=3/1, ino=11748387, nlink=1, u/gid=0/0,
size=12288: 1 Time(s)
     12: fl=0x802, mode=140777: SOCK localhost->[[UNIX:
/var/lib/imap/socket/lmtp]]:
1 Time(s)
      9: fl=0x8000, mode=100640: dev=3/1, ino=11748385, nlink=1, u/gid=0/51,
size=12288: 1 Time(s)
     13: fl=0x2, mode=140777: SOCK localhost->[[UNIX: /dev/log]]: 1 Time(s)
      9: fl=0x802, mode=140777: SOCK xxx.tld/42805->(Transport
endpoint is not connected): 1 Time(s)
      8: fl=0x802, mode=140777: SOCK xxx.tld/42794->(Transport
endpoint is not connected): 1 Time(s)
      3: fl=0x2, mode=100600: dev=3/65, ino=14794753, nlink=1, u/gid=0/0,
size=1481:
1 Time(s)
    MCI@0x92dfa44:
flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000,
phase=client
DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl.,
lastuse=Tue Oct 24 21:43:43 2006\n: 1 Time(s)
      4: fl=0x0, mode=100600: dev=3/65, ino=15007748, nlink=1, u/gid=0/51,
size=4190579: 1 Time(s)
      8: fl=0x8000, mode=100640: dev=3/1, ino=11748386, nlink=1, u/gid=0/0,
size=12288: 1 Time(s)
      9: fl=0x802, mode=140777: SOCK xxx.tld/42814->(Transport
endpoint is not connected): 1 Time(s)
    MCI@0x8944874:
flags=7806c<CACHED,ESMTP,SIZE,8BITMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=0,
herrno=0, exitstat=0, state=2, pid=0, maxsize=0, phase=idle, mailer=cyrusv2,
status=2.1.5, rstatus=250 2.1.5 Ok, host=localhost, lastuse=Tue Oct 24
21:21:56
2006\n: 1 Time(s)
      4: fl=0x2, mode=100600: dev=3/65, ino=14794753, nlink=1, u/gid=0/51,
size=1632: 1 Time(s)
      7: fl=0x8000, mode=100640: dev=3/1, ino=11748386, nlink=1, u/gid=0/0,
size=12288: 1 Time(s)
      9: fl=0x802, mode=140777: SOCK xxx.tld/42794->(Transport
endpoint is not connected): 1 Time(s)
      8: fl=0x802, mode=140777: SOCK xxx.tld/42805->(Transport
endpoint is not connected): 1 Time(s)
    MCI@0x92dfa44:
flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000,
phase=client
DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl.,
lastuse=Tue Oct 24 21:28:41 2006\n: 1 Time(s)
      4: fl=0x2, mode=100600: dev=3/65, ino=14794754, nlink=1, u/gid=0/51,
size=1632: 1 Time(s)
      8: fl=0x802, mode=140777: SOCK xxx.tld/42800->(Transport
endpoint is not connected): 1 Time(s)
     11: fl=0x802, mode=140777: SOCK localhost->[[UNIX:
/var/lib/imap/socket/lmtp]]:
1 Time(s)
     17: fl=0x802, mode=140777: SOCK xxx.tld/42789->(Transport
endpoint is not connected): 1 Time(s)
     16: fl=0x802, mode=140777: SOCK xxx.tld/42789->(Transport
endpoint is not connected): 1 Time(s)
      8: fl=0x802, mode=140777: SOCK xxx.tld/42814->(Transport
endpoint is not connected): 1 Time(s)
    MCI@0x894c9d4:
flags=7c86c<CACHED,ESMTP,SIZE,8BITMIME,DSN,INMIME,AUTH,AUTHACT,ENHSTAT,PIPELINED>,
errno=32, herrno=0, exitstat=75, state=8, pid=0, maxsize=8192000,
phase=client
DATA 354, mailer=esmtp, status=4.4.2, rstatus=(null), host=poczta.orange.pl.,
lastuse=Tue Oct 24 21:21:57 2006\n: 1 Time(s)
---------------------- sendmail End -------------------------