[Logwatch] New to Logwatch - Question about Connections: ServiceSMTP

logwatch at mikecappella.com logwatch at mikecappella.com
Fri May 12 09:07:53 MST 2006


> In the "Connections (secure-log)" section, I see a lot of 
> connections to service SMTP. Does this mean people are just 
> trying to use my server as an SMTP relay, or are they 
> actually succeeding. I've tried sending mail through my 
> server anonymously but it didn't work...here's the log file section: 
> 
> --------------------- Connections (secure-log) Begin 
> 
> 
> Connections:
>    Service ftp:
>       69.224.190.221: 7 Time(s)
>       213.201.51.45: 2 Time(s)
>    Service smtp:
>       12.130.29.196: 2 Time(s)
>       12.221.200.87: 1 Time(s)
>       17.254.6.18: 1 Time(s)
>       24.70.212.235: 1 Time(s)
>       24.107.30.208: 1 Time(s)


No way to know from this output.  You need to examine the maillogs
themselves to understand the intent and disposition of the SMPT connections.





More information about the Logwatch mailing list