Something where I can see quickly all the mail trafic of a mail account (with all the detail)
If it is posible I want to give some clients a way to view his log.
Sometime ago I have MailScanner but antispam wasnt good (so I install ASSP), but MailScanner have the best email reports (I want exactly that).
We got exception in Apache 2.4.9 Eventviewer
Faulting application name: httpd.exe, version: 2.4.9.0, time stamp: 0x5326c43e
Faulting module name: libapr-1.dll, version: 1.5.0.0, time stamp: 0x5326c4ed
Exception code: 0xc0000005
Fault offset: 0x000091b4
[Code] ....
For the last week or two my VPS keeps getting added to blacklists.
Yesterday I noticed that a website on the server was forward mail from a contact form to the clients AOL account, obviously scripts were completing the form on the website and that was being sent to AOL, who would of obviously blacklisted the IP.
I've stopped that now, but we're still getting black listed. I've had my VPS provider get exim to record the path that sent the e-mail, and there are no scripts on the server sending out mails that I should be worried about.
Some questions to help me.
How can you identify an outgoing e-mail? is it by the character '=>'? If so, is it normal for there to be e-mails being sent out:
2007-08-23 19:04:10 1IOH2K-00038j-Jg => /dev/null <shaun[at]sr8.co.uk> F=<aaron_straubegnvu[at]yahoo.com> R=central_filter T=**bypassed** S=0 QT=6s DT=0s
2007-08-23 19:04:10 1IOH2K-00038j-Jg Completed QT=6s
I'm puzzled as to why the server keeps being blacklisted, when I can't really see any problems in the log file?
The CBL website (which blacklisted us) says we were added at around 19:00GMT, so I've checked the logs for that time and can't really find much.
On the server there is one account with an autoresponder set as that person is away on holiday.
just reading my exim mainlog
there are soo many entries in there like activities every second
is this thing normal? does everyone get things like that?
2007-12-01 15:39:03 [24780] H=(acasa-wunxr966z) [89.137.206.241]:4505 I=[69.16.237.199]:25 F=<hurdlingm290@tulipjewelry.com> rejected RCPT <a$
2007-12-01 15:39:03 [24780] SMTP connection from (acasa-wunxr966z) [89.137.206.241]:4505 I=[69.16.237.199]:25 closed by DROP in ACL
2007-12-01 15:39:03 [24777] H=pool-71-178-230-135.washdc.fios.verizon.net (Wireless_Broadband_Router) [71.178.230.135]:4624 I=[69.16.237.199]$
2007-12-01 15:39:03 [24777] SMTP connection from pool-71-178-230-135.washdc.fios.verizon.net (Wireless_Broadband_Router) [71.178.230.135]:462$
2007-12-01 15:39:03 [24776] H=pool-71-178-230-135.washdc.fios.verizon.net (Wireless_Broadband_Router) [71.178.230.135]:4623 I=[69.16.237.199]$
2007-12-01 15:39:03 [24776] SMTP connection from pool-71-178-230-135.washdc.fios.verizon.net (Wireless_Broadband_Router) [71.178.230.135]:462$
2007-12-01 15:39:03 [1382] SMTP connection from [200.61.182.11]:55819 I=[69.16.237.199]:25 (TCP/IP connection count = 7)
GNU nano 1.2.4 File: exim_mainlog
2007-12-02 01:25:14 [17530] ident connection to 85.168.154.92 timed out
2007-12-02 01:25:15 [1382] SMTP connection from [75.82.171.71]:1614 I=[69.16.237.199]:25 (TCP/IP connection count = 9)
2007-12-02 01:25:16 [17527] H=adsl196-236-229-217-196.adsl196-16.iam.net.ma [196.217.229.236]:59900 I=[69.16.237.199]:25 F=<patti@myrealbox.c$
2007-12-02 01:25:16 [17527] SMTP connection from adsl196-236-229-217-196.adsl196-16.iam.net.ma [196.217.229.236]:59900 I=[69.16.237.199]:25 c$
2007-12-02 01:25:16 [17528] H=79.red-83-42-176.dynamicip.rima-tde.net [83.42.176.79]:29547 I=[69.16.237.199]:25 F=<mostafa.Brindel@bhcat.com>$
2007-12-02 01:25:16 [17528] SMTP connection from 79.red-83-42-176.dynamicip.rima-tde.net [83.42.176.79]:29547 I=[69.16.237.199]:25 closed by $
2007-12-02 01:25:16 [1382] SMTP connection from [79.120.55.8]:4202 I=[69.16.237.199]:25 (TCP/IP connection count = 8)
2007-12-02 01:25:17 [17531] ident connection to 75.82.171.71 timed out
2007-12-02 01:25:17 [17529] H=(cpe-76-91-84-170.socal.res.rr.com) [76.91.84.170]:4913 I=[69.16.237.199]:25 F=<occurrenceq@bhrugu.com> rejecte$
2007-12-02 01:25:17 [17529] SMTP connection from (cpe-76-91-84-170.socal.res.rr.com) [76.91.84.170]:4913 I=[69.16.237.199]:25 closed by DROP $
2007-12-02 01:25:17 [17530] H=m92.net85-168-154.noos.fr [85.168.154.92]:1310 I=[69.16.237.199]:25 F=<Eng-Mroz@ROWELLMANAGEMENT.COM> rejected $
2007-12-02 01:25:17 [17530] SMTP connection from m92.net85-168-154.noos.fr [85.168.154.92]:1310 I=[69.16.237.199]:25 closed by DROP in ACL
2007-12-02 01:25:18 [17531] H=cpe-75-82-171-71.socal.res.rr.com [75.82.171.71]:1614 I=[69.16.237.199]:25 F=<Kallio@jeunesfilles.org> rejected$
2007-12-02 01:25:18 [17531] SMTP connection from cpe-75-82-171-71.socal.res.rr.com [75.82.171.71]:1614 I=[69.16.237.199]:25 closed by DROP in$
2007-12-02 01:25:18 [1382] SMTP connection from [201.228.173.190]:48177 I=[69.16.237.199]:25 (TCP/IP connection count = 6)
2007-12-02 01:25:18 [1382] SMTP connection from [24.29.242.1]:1137 I=[69.16.237.199]:25 (TCP/IP connection count = 7)
2007-12-02 01:25:18 [1382] SMTP connection from [189.138.165.115]:3302 I=[69.16.237.199]:25 (TCP/IP connection count = 8)
2007-12-02 01:25:19 [17535] H=ppp1-139.ciscom.ru [79.120.55.8]:4202 I=[69.16.237.199]:25 F=<attorneylff8@torborg.com> rejected RCPT <azeer@mp$
2007-12-02 01:25:19 [17535] SMTP connection from ppp1-139.ciscom.ru [79.120.55.8]:4202 I=[69.16.237.199]:25 closed by DROP in ACL
2007-12-02 01:25:19 [1382] SMTP connection from [189.31.128.172]:52503 I=[69.16.237.199]:25 (TCP/IP connection count = 8)
2007-12-02 01:25:20 [17538] ident connection to 201.228.173.190 timed out
2007-12-02 01:25:20 [17538] no host name found for IP address 201.228.173.190
2007-12-02 01:25:20 [17538] list matching forced to fail: failed to find host name for 201.228.173.190
2007-12-02 01:25:20 [17539] ident connection to 24.29.242.1 timed out
2007-12-02 01:25:20 [17539] no IP address found for host cpe-24-29-242-1.neo.res.rr.com (during SMTP connection from [24.29.242.1]:1137 I=[69$
2007-12-02 01:25:20 [17539] list matching forced to fail: failed to find host name for 24.29.242.1
2007-12-02 01:25:20 [17540] ident connection to 189.138.165.115 timed out
2007-12-02 01:25:20 [17540] no IP address found for host dsl-189-138-165-115.prod-infinitum.com.mx (during SMTP connection from [189.138.165.$
2007-12-02 01:25:20 [17540] list matching forced to fail: failed to find host name for 189.138.165.115
2007-12-02 01:25:21 [17539] H=(cpe-24-29-242-1.neo.res.rr.com) [24.29.242.1]:1137 I=[69.16.237.199]:25 F=<lesley.Ervamaa@agustinbarreto.com> $
2007-12-02 01:25:21 [17539] SMTP connection from (cpe-24-29-242-1.neo.res.rr.com) [24.29.242.1]:1137 I=[69.16.237.199]:25 closed by DROP in A$
2007-12-02 01:25:21 [17541] ident connection to 189.31.128.172 timed out
2007-12-02 01:25:21 [17541] no host name found for IP address 189.31.128.172
2007-12-02 01:25:21 [17541] list matching forced to fail: failed to find host name for 189.31.128.172
2007-12-02 01:25:21 [17538] H=(201.228.173.190) [201.228.173.190]:48177 I=[69.16.237.199]:25 F=<thiam3@searchhound.com> rejected RCPT <larifi$
2007-12-02 01:25:21 [17538] SMTP connection from (201.228.173.190) [201.228.173.190]:48177 I=[69.16.237.199]:25 closed by DROP in ACL
2007-12-02 01:25:22 [1382] SMTP connection from [82.73.58.94]:1465 I=[69.16.237.199]:25 (TCP/IP connection count = 7)
2007-12-02 01:25:22 [17540] H=(dsl-189-138-165-115.prod-infinitum.com.mx) [189.138.165.115]:3302 I=[69.16.237.199]:25 F=<emasculateq@tulsavrp$
2007-12-02 01:25:22 [17540] SMTP connection from (dsl-189-138-165-115.prod-infinitum.com.mx) [189.138.165.115]:3302 I=[69.16.237.199]:25 clos$
2007-12-02 01:25:22 [1382] SMTP connection from [71.107.124.63]:1886 I=[69.16.237.199]:25 (TCP/IP connection count = 7)