[K12OSN] weird maillog

[Peter Hartmann]

Hey Barry,
I don't have any unknown virtusers.  But I was able to recreate the
same kind of log entry with telnet.  from another connection I did:

telnet [server] 110
user jim@
pass stuff

and the log entry looks the same.

May 23 17:41:30 mail vpopmail[7620]: vchkpw-pop3: vpopmail user not
found jim@:xx.xx.xx.xx


So it's not an internal problem i think, just some bot looking for
valid users.  Still I wonder if I can use somethinkg like fail2ban.  I
have a feeling that's what cause the imap sever error.

Thanks!
Peter


On 5/23/07, Barry Cisna <brcisna at eazylivin.net> wrote:
> Peter,
>
> I've never used Qmail, but if I seen this error in Dovecot IMAP/POP
> server, Id say somehow,there is a "virtuser" setting in your qmail.config
> that is pointing to the IP address that is listed in your maillog.
> Open your Qmail.conf file in text editor and search for the IP address
> listed in your maillog,for a starting point.
> Let us know if you advance any further:),,
>
> Barry Cisna
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
>