Review your favorite Linux distribution.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 09-15-2004, 10:04 PM   #1
LQ Newbie
Registered: Sep 2004
Location: alabama
Distribution: redhat enterprise 3 es
Posts: 1

Rep: Reputation: 0
Unhappy how to read mail logs?

Hi, I am a newbie. I have been playing with red hat enterprise 3 es FOR ABOUT A MONTH since my company decided they wanted to do their own hosting. We are have serious problems with bounce backs and double bounce backs from qmail. I know this because my suporvisor said he was getting bounce backs emails from the server because of spammers. How does anyone suggest that I can stop this. are there any features in qmail mail to prevent the bouncback from being sent to the postmaster? And does anyone know any good sites explaing how to read mail logs?
Old 09-19-2004, 10:47 AM   #2
Senior Member
Registered: Nov 2002
Location: pikes peak
Distribution: Slackware, LFS
Posts: 2,577

Rep: Reputation: 48
Old 09-21-2004, 09:41 AM   #3
Registered: Aug 2003
Location: Little Rock, Arkansas
Distribution: RH, Fedora, Suse, AIX
Posts: 736

Rep: Reputation: 31
You should consider applying the mfcheck patch to your qmail source tree and run make setup check after the patch is applied. This patch will cause qmail to do a reverse DNS check on the sending mail server to be sure it's got reverse DNS properly setup. if the mail server sending the messages are run by spammers, usually they will not have reverse DNS setup properly, whereas "real" mail servers will have it setup correctly.

The reason for all of this is so that if you DO receive spam and it's addressed to a bogus account on your system, you will be able to bounce the message back to the proper machine. This will reduce the number of bounce messages your system is unsuccessfully trying to deliver.

Also be sure to run...

echo 1 > /var/qmail/control/mfcheck

to enable the reverse lookups.

If you're getting triple bounce messages, this means something is messed up on your system. qmail normally disacards triple bounce messages automatically, but if you're seeing this message somewhere in your logs, it means there is not an adequate account for receiving the triple bounce messages.

If you'd like to simply discard the double bounce messages completely, you can run these commands...

echo 'doublebounce' > /var/qmail/control/doublebounceto
echo '' > /var/qmail/control/doublebouncehost
echo '#' > ~alias/.qmail-doublebounce
chmod 644 ~alias/.qmail-doublebounce

Be sure to change the host to your domain name.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
how do i read logs from Freebsd?? human *BSD 2 03-01-2005 07:19 PM
apache logs please teach me how to read them Lleb_KCir Linux - Security 17 04-28-2004 03:18 PM
how to read fwlogwatch logs rosscopeeko Mandriva 1 04-20-2004 02:22 AM
Gui wont start cant read logs what to do shaneblyth Linux - Newbie 1 12-03-2003 02:08 AM
mail logs when i havent sent mail poseidoniv Linux - Newbie 1 04-19-2003 03:39 PM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 01:28 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration