[CentOS] Re: Problem with some smtp MTAs

Fri Feb 16 19:06:08 UTC 2007
James B. Byrne <byrnejb at harte-lyne.ca>

On Fri, February 16, 2007 13:32, James B. Byrne wrote:
> I am getting large numbers of these types of messages in my maillog files:
>
> somehost.hotmail.com [65.54.246.97] did not issue MAIL/EXPN/VRFY/ETRN
> during connection to MTA
>
>

Possibly in relation to this problem I am seeing the following processes:

root     16758     1  0 13:17 ?        00:00:00 sendmail: server
dslb-088-070-014-
root     16996     1  0 13:23 ?        00:00:00 sendmail: server
[41.248.11.84] cm
root     17261     1  0 13:30 ?        00:00:00 sendmail: server
cm90166.red83-165
root     17423     1  0 13:35 ?        00:00:00 sendmail: server
saihou07.saisoft.
root     17467     1  0 13:37 ?        00:00:00 sendmail: server
imf20aec.mail.bel
root     17517     1  0 13:38 ?        00:00:00 sendmail: server
71-37-44-219.tukw
root     17529     1  0 13:39 ?        00:00:00 sendmail: server
203-144-153-222.s
root     17633     1  0 13:41 ?        00:00:00 sendmail: accepting
connections
root     17634 17633  0 13:41 ?        00:00:00 sendmail: ./l1FKUT3v010731
mail.gi
smmsp    17641     1  0 13:41 ?        00:00:00 sendmail: Queue
runner at 01:00:00 fo
root     17715 17633  0 13:44 ?        00:00:00 sendmail: server
84-55-78-153.rev.
root     17758 17633  0 13:45 ?        00:00:00 sendmail: server
smtp5.mundo-r.com
root     17781 17633  0 13:46 ?        00:00:00 sendmail: server
saihou07.saisoft.
root     17862 17633  0 13:48 ?        00:00:00 sendmail: server
imf16aec.mail.bel
root     17863 17633  0 13:48 ?        00:00:00 sendmail: server
imf16aec.mail.bel
root     17864 17633  0 13:48 ?        00:00:00 sendmail: server
imf16aec.mail.bel
root     17866 17633  0 13:48 ?        00:00:00 sendmail: server
imf16aec.mail.bel
root     17868 17633  0 13:48 ?        00:00:00 sendmail: server
imf16aec.mail.bel
root     17869 17633  0 13:48 ?        00:00:00 sendmail: server
imf16aec.mail.bel
root     17883 17633  0 13:48 ?        00:00:00 sendmail: server
cc154194-a.haaks1
root     17906 17633  0 13:49 ?        00:00:00 sendmail: server
76.pool85-57-36.d
root     17946 17633  0 13:50 ?        00:00:00 sendmail: server
[200.21.164.14] c
root     18014 17633  0 13:51 ?        00:00:00 sendmail: server
host86-143-148-10
root     18167 17633  0 13:55 ?        00:00:00 sendmail: server
206-81-246-201.ad
root     18219 17633  0 13:56 ?        00:00:00 sendmail: startup with
simmts2-srv
root     18224 17633  0 13:56 ?        00:00:00 sendmail: startup with
[151.76.209
root     18226 17633  0 13:56 ?        00:00:00 sendmail: startup with
mail.bis.eu
root     18228 17633  0 13:56 ?        00:00:00 sendmail: startup with
smtp.myclea
root     18230 17633  0 13:56 ?        00:00:00 sendmail: startup with
APoitiers-2
root     18231 17633  0 13:56 ?        00:00:00 sendmail: startup with
host138-55-
root     18234 17633  0 13:56 ?        00:00:00 sendmail: startup with
c63314BC1.d
root     18235 17633  0 13:56 ?        00:00:00 sendmail: startup with
email-proxy
root     18238 17633  0 13:57 ?        00:00:00 sendmail: startup with
bay0-omc3-s
root     18239 17633  0 13:57 ?        00:00:00 sendmail: startup with
[151.76.209
root     18241 17633  0 13:57 ?        00:00:00 sendmail: startup with
mta-c3.warp
root     18242 17633  0 13:57 ?        00:00:00 sendmail: startup with
BHE20013915
root     18243 17633  0 13:57 ?        00:00:00 sendmail: startup with
smtp.myclea
root     18244 17633  0 13:57 ?        00:00:00 sendmail: startup with
[213.154.93
root     18245 17633  0 13:57 ?        00:00:00 sendmail: startup with
cm117.delta
root     18246 17633  0 13:57 ?        00:00:00 sendmail: startup with
APoitiers-2
root     18247 17633  0 13:57 ?        00:00:00 sendmail: startup with
aog206.neop
root     18248 17633  0 13:57 ?        00:00:00 sendmail: startup with
email-surro
root     18249 17633  0 13:57 ?        00:00:00 sendmail: startup with
dslb-084-06
root     18250 17633  0 13:57 ?        00:00:00 sendmail: startup with
st64.startl
root     18251 17633  0 13:57 ?        00:00:00 sendmail: startup with
d-210-236-7
root     18252 17633  0 13:57 ?        00:00:00 sendmail: startup with
mx06.bwc.na
root     18253 17633  0 13:57 ?        00:00:00 sendmail: startup with
smtp11-01.p
root     18254 17633  0 13:57 ?        00:00:00 sendmail: startup with
cm035.hic5.
root     18257 17633  0 13:57 ?        00:00:00 sendmail: startup with
77-99-51-11
root     18258 17633  0 13:57 ?        00:00:00 sendmail: startup with
[212.110.77
root     18259 17633  0 13:57 ?        00:00:00 sendmail: startup with
218.65.adsl
root     18260 17633  0 13:57 ?        00:00:00 sendmail: startup with
mail.bis.eu
root     18261 17633  0 13:57 ?        00:00:00 sendmail: startup with
BHE20013915
root     18262 17633  0 13:57 ?        00:00:00 sendmail: startup with
65-115-77-1
root     18265 17633  0 13:57 ?        00:00:00 sendmail: startup with
adsl-084.22
root     18266 17633  0 13:57 ?        00:00:00 sendmail: startup with
localhost
root     18267 17633  0 13:57 ?        00:00:00 sendmail: startup with
[24.218.14.
root     18268 17633  0 13:57 ?        00:00:00 sendmail: startup with
APoitiers-2
root     18269 17633  0 13:57 ?        00:00:00 sendmail: startup with
68-190-55-1
root     18270 17633  0 13:57 ?        00:00:00 sendmail: startup with
c-24-0-176-
root     18271 17633  0 13:57 ?        00:00:00 sendmail: startup with
[84.52.106.
root     18272 17633  0 13:57 ?        00:00:00 sendmail: startup with
240.50.124.
root     18273 17633  0 13:57 ?        00:00:00 sendmail: startup with
29-121.124-
root     18274 17633  0 13:57 ?        00:00:00 sendmail: startup with
200-180-9-1
root     18275 17633  0 13:57 ?        00:00:00 sendmail: startup with
dyndsl-091-
root     18276 17633  0 13:57 ?        00:00:00 sendmail: startup with
NET-allocat
root     18277 17633  0 13:57 ?        00:00:00 sendmail: startup with
[213.156.11
root     18278 17633  0 13:57 ?        00:00:00 sendmail: startup with
cm035.hic5.
root     18279 16634  0 13:57 pts/0    00:00:00 ps -ef
root     18280 17633  0 13:57 ?        00:00:00 sendmail: startup with
209.226.175

Which is an unusually high number for our organization.  The other
external MX machine is similarly loaded.  Are these issues related to one
another?

-- 
James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3