[milters] Archive

Lists Index Date Thread Search

Article: 300
From: Kyle Harris
Date: 2004-12-27 10:47:47 -0500
Subject: Re: Unexpected EOF error in mail log

Removal...........: milters-request@milter.info?subject=remove
More information..: http://www.milter.info/#Support
--------------------------------------------------------

The following information was derived using info,trace.  Let me know if
that is not enough and I will then use info,trace,dialogue.

First Instance:

Dec 27 09:35:03 spam milter-sender[1676]: 00308 NOQUEUE:
filterOpen(8ccf1c8, 'nz
u0894.nzubr1.thn.ne.jp', [61.200.115.126])
Dec 27 09:35:03 spam milter-sender[1676]: 00308 NOQUEUE: enter
filterHelo(8ccf1c
8, 'nzu0894.nzubr1.thn.ne.jp')
Dec 27 09:35:03 spam milter-sender[1676]: 00308 NOQUEUE:
HELO='nzu0894.nzubr1.th
n.ne.jp' if_addr='192.168.4.5' tls_version=''
Dec 27 09:35:03 spam milter-sender[1676]: 00308 NOQUEUE:
client_name='nzu0894.nz
ubr1.thn.ne.jp' client_addr='61.200.115.126' client_resolve='OK'
verify=''
Dec 27 09:35:04 spam milter-sender[1676]: 00308 NOQUEUE: exit
filterHelo(8ccf1c8
, 'nzu0894.nzubr1.thn.ne.jp')
Dec 27 09:35:04 spam milter-sender[1676]: 00308 iBRFZ3WN004658:
MAIL='<Christian
csnw@avu.org>' auth_authen='' mail_addr='Christiancsnw@avu.org'
mail_host='avu.o
rg.' mail_mailer='esmtp'
Dec 27 09:35:04 spam milter-sender[1676]: 00308 iBRFZ3WN004658: enter
mxCallBack
()
Dec 27 09:35:06 spam milter-sender[1676]: 00308 iBRFZ3WN004658:
unexpected EOF f
rom SMTP server
Dec 27 09:35:19 spam milter-sender[1676]: 00308 iBRFZ3WN004658: exit
mxCallBack(
) rc=0
Dec 27 09:35:20 spam milter-sender[1676]: 00308 iBRFZ3WN004658:
RCPT='<myuser
@trcintl.com>' rcpt_addr='myuser@trcintl.com'
rcpt_host='[trcbt1.trcintl.com]
' rcpt_mailer='smtp'
Dec 27 09:35:20 spam milter-sender[1676]: 00308 iBRFZ3WN004658: reply
450 4.7.1
from <Christiancsnw@avu.org> via [61.200.115.126] to
<myuser@trcintl.com> den
ied for 600 seconds
Dec 27 09:35:20 spam milter-sender[1676]: 00308 NOQUEUE:
filterClose(8ccf1c8) 

Second Instance:

Dec 27 09:43:42 spam milter-sender[1676]: 00409 NOQUEUE:
filterOpen(8cc74c0, 'we
b5.100mb.net', [195.14.47.73])
Dec 27 09:43:42 spam milter-sender[1676]: 00409 NOQUEUE: enter
filterHelo(8cc74c
0, 'web5.100mb.net')
Dec 27 09:43:42 spam milter-sender[1676]: 00409 NOQUEUE:
HELO='web5.100mb.net' i
f_addr='192.168.4.5' tls_version=''
Dec 27 09:43:42 spam milter-sender[1676]: 00409 NOQUEUE:
client_name='web5.100mb
.net' client_addr='195.14.47.73' client_resolve='OK' verify=''
Dec 27 09:43:42 spam milter-sender[1676]: 00409 NOQUEUE: exit
filterHelo(8cc74c0
, 'web5.100mb.net')
Dec 27 09:43:42 spam milter-sender[1676]: 00409 iBRFhgWN005263:
MAIL='<httpd@web
5.100mb.net>' auth_authen='' mail_addr='httpd@web5.100mb.net'
mail_host='web5.10
0mb.net.' mail_mailer='esmtp'
Dec 27 09:43:42 spam milter-sender[1676]: 00409 iBRFhgWN005263: enter
mxCallBack
()
Dec 27 09:44:09 spam milter-sender[1676]: 00409 iBRFhgWN005263:
unexpected EOF f
rom SMTP server
Dec 27 09:45:00 spam milter-sender[1676]: 00409 iBRFhgWN005263:
unexpected EOF f
rom SMTP server
Dec 27 09:45:00 spam milter-sender[1676]: 00409 iBRFhgWN005263: reply
450 4.7.1
MX 0 'web5.100mb.net.' [195.14.47.73] for <httpd@web5.100mb.net> not
answering
Dec 27 09:45:00 spam milter-sender[1676]: 00409 iBRFhgWN005263: exit
mxCallBack(
) rc=4

Kyle H.



-----Original Message-----
From: milters-bounce@milter.info [mailto:milters-bounce@milter.info] On
Behalf Of Anthony Howe
Sent: Saturday, December 25, 2004 7:03 AM
To: milters@milter.info
Subject: [milters] Re: Unexpected EOF error in mail log

Removal...........: milters-request@milter.info?subject=remove
More information..: http://www.milter.info/#Support
--------------------------------------------------------

Kyle Harris wrote:

> Yesterday I implemented milter-sender on my MTA (Sendmail 8.12.10) and

> so far, so good.  However, I have been receiving a lot of the 
> following errors in my mail log:
> 
> Dec 21 08:32:31 MyServerName milter-sender[1677]: 00272
iBLEW7G9004378:
> unexpected EOF from SMTP server

Not sure what might cause this. It might be a case where the server
milter-sender attempts to contact drops the connection intentionally,
either because it things you're a spammer or it itself is a spammer.

Either way, if the mail looks like its coming from someplace your might
want to talk to, white list it. If you had more log info like

	MailLogDetail=info,trace
or
	MailLogDetail=info,trace,dialogue

then I could see more of whats going on. Like the domain and/or MX that
is being contacted and test it manually.

-- 
Anthony C Howe                                 +33 6 11 89 73 78
http://www.snert.com/       ICQ:
7116561         AIM: Sir Wumpus

            "Once...we were here."  - Last of The Mohicans




Lists Index Date Thread Search