[PLUG] First run of pflogsumm, talk about troubling results...

Russ Johnson russj at dimstar.net
Sun Oct 12 20:15:02 UTC 2003


Michael C. Robinson wrote:

>Host/Domain Summary: Message Delivery 
> sent cnt  bytes   defers   avg dly max dly host/domain
> -------- -------  -------  ------- ------- -----------
>      8    26976        0     2.2 s    3.0 s  goose.robinson-west.com
>      1     1244        0     1.0 s    1.0 s  opusnet.com
>      1      834        0     1.0 s    1.0 s  hotmail.com
>      1      558        0     4.0 s    4.0 s  pcc.edu
>      0        0        2     0.0 s   47.8 h  biggestdealsontheweb.com
>      0        0        2     0.0 s   38.8 h  yam.com.tw
>      0        0        2     0.0 s   39.3 h  vast.brasdan.com
>      0        0       65     0.0 s  100.1 h  bounce.iexpect.com
>      0        0        3     0.0 s   83.8 h  wegoingupinpeace.com
>      0        0        2     0.0 s   22.2 h  sprint.com
>      0        0        2     0.0 s   45.0 h  123box.co.uk
>      0        0        3     0.0 s   76.8 h  data-flow.com
>      0        0        2     0.0 s   35.9 h  cnnb.net
>
>
>**  Seems like only the first four, and none of the rest should be in
>    the Host/Domain summary.
>

Even though they are deferred, they are still messages processed by the 
system, and so they are listed.

>Senders by message size
>-----------------------
>  25071   plug-admin at lists.pdxlinux.org
>   2636   michael at goose.robinson-west.com
>   1905   L1116654826.100409.2 at service.emf0.com
>
>
>** Who the heck is that third Sender?  
>   It shouldn't be in there.
>
"senders" are both on incoming and outgoing mail. The "spammer" you 
cited in previous sections is the sender in this list.

>message deferral detail
>-----------------------
>  nqmgr
>        33   Connection timed out
>  smtp
>        37   Connection timed out
>         3   data-flow.com[63.122.103.23]: Connection refused
>         2   Name service error for bounce.boulnare.com: Host not found
>         2   ms.yam.com.tw[211.72.254.200]: Connection timed out
>         2   Host not found, try again
>         2   mail.123box.co.uk[1.0.0.0]: Connection timed out
>         1   pop3.cnnb.net[202.96.105.110]: Connection timed out
> 
>      1   pop3.cnnb.net[202.96.105.111]: Connection timed out
>
>
>**  Shouldn't be connecting to any of these under 
>    message deferral detail.
>

You have mail for these places in your mail queue. Possibly bounces.

>smtp delivery failures
>----------------------
>  connection refused
>         3   data-flow.com
>  connection timed out
>        32   bounce.iexpect.com
>         4   pop3.cnnb.net
>         2   mail.123box.co.uk
>         2   parker2.sprint.com
>         2   parker1.sprint.com
>         2   ms.yam.com.tw
>         2   wegoingupinpeace.com
>         1   biggestdealsontheweb.com
>
>
>
>** All of the above smtp delivery failures are 
>   places I shouldn't be trying to connect to,
>   what's going on here?
>
Check your mail queue.

Russ





More information about the PLUG mailing list