Ich danke euch für die schnellen Antworten.
Ein DB-Backup? Klar doch. Diese lagen ebenfalls auf der defekten Platte.
Mein Kumpel hat sicherlich alles zurückgespielt, was noch da war. Er hat auch noch mal sämtliche Configs von Hand angepasst.
Ob Courier als MTA läuft oder ob das Maildrop erledigt, kann ich nicht sagen, dafür sind meine Kenntnisse zu schmal.
Ich poste einfach mal die Logs:
var/log/mail.info:
Code: Select all
Sep 14 01:39:06 service courierd: Loading STATIC transport module libraries.
Sep 14 01:39:06 service courierd: Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Installing [0/0]
Sep 14 01:39:06 service courierd: Installing uucp
Sep 14 01:39:06 service courierd: Installed: module.uucp - Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Installing local
Sep 14 01:39:06 service courierd: Installed: module.local - Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Installing fax
Sep 14 01:39:06 service courierd: Installed: module.fax - Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Installing esmtp
Sep 14 01:39:06 service courierd: Installed: module.esmtp - Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Installing dsn
Sep 14 01:39:06 service courierd: Installed: module.dsn - Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Initializing uucp
Sep 14 01:39:06 service courierd: Initializing local
Sep 14 01:39:06 service courierd: Initializing fax
Sep 14 01:39:06 service courierd: Initializing esmtp
Sep 14 01:39:06 service courierd: Initializing dsn
Sep 14 01:39:06 service courierd: Started ./courieruucp, pid=2606, maxdels=4, maxhost=4, maxrcpt=16
Sep 14 01:39:06 service courierd: Started ./courierlocal, pid=2607, maxdels=10, maxhost=4, maxrcpt=1
Sep 14 01:39:06 service courierd: Started ./courierfax, pid=2608, maxdels=1, maxhost=1, maxrcpt=1
Sep 14 01:39:06 service courierd: Started ./courieresmtp, pid=2609, maxdels=40, maxhost=4, maxrcpt=100
Sep 14 01:39:06 service courierd: Started ./courierdsn, pid=2610, maxdels=4, maxhost=1, maxrcpt=1
Sep 14 01:39:06 service courierd: queuelo=200, queuehi=400
Sep 14 01:39:06 service courierd: Purging /var/lib/courier/msgq
Sep 14 01:39:06 service courierd: Purging /var/lib/courier/msgs
Sep 14 01:39:06 service courierd: Waiting. shutdown time=Tue Sep 14 02:39:06 2010, wakeup time=Tue Sep 14 02:39:06 2010, queuedelivering=0, inprogress=0
Sep 14 01:42:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:42:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:47:14 service courierpop3login: LOGIN, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:47:14 service courierpop3login: LOGOUT, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:47:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:47:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:52:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:52:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:57:14 service courierpop3login: LOGIN, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:57:14 service courierpop3login: LOGOUT, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:57:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:57:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:59:13 service courieresmtpd: started,ip=[::ffff:95.130.125.191]
Sep 14 01:59:22 service courieresmtpd: error,relay=::ffff:95.130.125.191,from=<tamara@adultbestprice.de>,to=<david@easyweb4you.de>: 550 User unknown.
Sep 14 01:59:22 service courieresmtpd: error,relay=::ffff:95.130.125.191,msg="502 ESMTP command error",cmd: DATA
Sep 14 02:02:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:02:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:07:14 service courierpop3login: LOGIN, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:07:14 service courierpop3login: LOGOUT, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:07:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:07:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:12:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:12:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:17:14 service courierpop3login: LOGIN, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:17:14 service courierpop3login: LOGOUT, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:17:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:17:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:22:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:22:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:27:14 service courierpop3login: LOGIN, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:27:14 service courierpop3login: LOGOUT, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:27:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:27:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:32:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:32:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
var/log/mail.err:
Code: Select all
Sep 13 17:37:11 service courieresmtpd: error,relay=::ffff:91.37.134.246,from=<info@easyweb4you.de>,to=<easyudo@hotmail.com>: 513 Relaying denied.
Sep 13 17:40:57 service courieresmtpd: error,relay=::ffff:213.138.85.142,from=<support@easyweb4you.de>,to=<support@easyweb4you.de>: 550 User unknown.
Sep 13 18:05:43 service courieresmtpd: error,relay=::ffff:195.93.194.8,from=<root@mailout.pressetext.com>,to=<info@powerweb4you.de>: 550 User unknown.
Sep 13 18:06:22 service courieresmtpd: error,relay=::ffff:62.93.21.209,from=<bounce20@mailwunder.de>,to=<david@easyweb4you.de>: 550 User unknown.
Sep 13 18:23:16 service courieresmtpd: error,relay=::ffff:201.62.193.124,from=<Krista@cajdadjdaf.vojnamirov.com>,to=<info@gold-uhren-studio.de>: 550 User unknown.
Sep 13 18:26:38 service courieresmtpd: error,relay=::ffff:122.167.102.109,from=<Ethel@bidfeeeaja.vojnamirov.com>,to=<info@easyweb4you.de>: 550 User unknown.
Sep 13 18:31:24 service courieresmtpd: error,relay=::ffff:62.143.30.42,from=<Quinn@haggeficc.vojnamirov.com>,to=<info@powerweb4you.de>: 550 User unknown.
Sep 13 18:34:05 service courieresmtpd: error,relay=::ffff:91.202.186.11,from=<Justin@bjghjaihf.vojnamirov.com>,to=<info@tormusic.de>: 550 User unknown.
Sep 13 18:34:11 service courieresmtpd: error,relay=::ffff:201.50.26.65,from=<Ted@bajccdfjhh.vojnamirov.com>,to=<info@urlaub-ribnitz.de>: 550 User unknown.
Sep 13 18:43:06 service courieresmtpd: error,relay=::ffff:189.25.208.170,from=<Brittany@cigfhgehjh.vojnamirov.com>,to=<infod@easyweb4you.de>: 550 User unknown.
Sep 13 18:43:22 service courieresmtpd: error,relay=::ffff:189.25.208.170,from=<Brittany@cigfhgehjh.vojnamirov.com>,to=<infodd@easyweb4you.de>: 550 User unknown.
Sep 13 18:43:52 service courieresmtpd: error,relay=::ffff:87.238.81.56,from=<2010091307202769a3a834041240b1a17f61f5fd43d5c8@bounces.amazon.com>,to=<marlies@easyweb4you.de>: 550 User unknown.
Sep 13 18:43:54 service courieresmtpd: error,relay=::ffff:189.25.208.170,from=<Brittany@cigfhgehjh.vojnamirov.com>,to=<infol@easyweb4you.de>: 550 User unknown.
Sep 13 18:50:43 service courieresmtpd: error,relay=::ffff:123.110.155.42,from=<Joel@hbeicjedf.vojnamirov.com>,to=<itrem-euyus@laxmo.de>: 550 User unknown.
Sep 13 18:55:34 service courieresmtpd: error,relay=::ffff:190.253.237.176,from=<l@tormusic.de>,to=<l@tormusic.de>: 550 User unknown.
Sep 13 19:09:38 service courieresmtpd: error,relay=::ffff:94.75.58.238,from=<hmwsrjpha@animalreliefresource.org>,to=<ebay@easyweb4you.de>: 550 User unknown.
Sep 13 19:09:48 service courieresmtpd: error,relay=::ffff:94.75.58.238,from=<haoas@agudathachim.org>,to=<infod@easyweb4you.de>: 550 User unknown.
Sep 13 19:10:01 service courieresmtpd: error,relay=::ffff:94.75.58.238,from=<7pulkexiwrh28@adoptionconnection.org>,to=<thisisjusttestmessageatall@easyweb4you.de>: 550 User unknown.
Sep 13 19:12:16 service postfix/master[19445]: fatal: bind 0.0.0.0 port 25: Address already in use
Sep 13 19:16:24 service courieresmtpd: error,relay=::ffff:187.66.168.219,from=<info@tormusic.de>,to=<info@tormusic.de>: 550 User unknown.
Sep 13 19:16:58 service courieresmtpd: error,relay=::ffff:91.37.134.246,from=<info@easyweb4you.de>,to=<easyudo@hotmail.com>: 513 Relaying denied.
Sep 13 19:21:33 service courieresmtpd: error,relay=::ffff:81.92.122.151,from=<info@email.winopolis.cccampaigns.net>,to=<david@easyweb4you.de>: 550 User unknown.
Sep 13 19:27:48 service courieresmtpd: error,relay=::ffff:65.55.90.87,from=<easyudo@hotmail.com>,to=<info@easyweb4you.de>: 550 User unknown.
Sep 13 19:37:43 service courieresmtpd: error,relay=::ffff:95.130.125.187,from=<mami@erotiknewsdienst.com>,to=<david@easyweb4you.de>: 550 User unknown.
Sep 13 19:38:23 service courieresmtpd: error,relay=::ffff:190.135.12.13,from=<Max@cbijcejja.vojnamirov.com>,to=<kucher@easyweb4you.de>: 550 User unknown.
Sep 13 19:38:27 service courieresmtpd: error,relay=::ffff:89.191.130.236,from=<xnydmpujnmgyc@aahip.org>,to=<lardenwiaae@easyweb4you.de>: 550 User unknown.
Sep 13 19:38:39 service courieresmtpd: error,relay=::ffff:89.191.130.236,from=<ulqaswp@alphaangelsinc.org>,to=<goodwin.darby@easyweb4you.de>: 550 User unknown.
Sep 13 19:39:41 service courieresmtpd: error,relay=::ffff:79.115.246.97,from=<Roosevelt@bgedfebdch.vojnamirov.com>,to=<l@tormusic.de>: 550 User unknown.
Sep 13 19:42:11 service courieresmtpd: error,relay=::ffff:93.1.105.253,from=<Richard@ecfbfbhchh.vojnamirov.com>,to=<lardenwiaae@easyweb4you.de>: 550 User unknown.
Sep 13 19:42:54 service courieresmtpd: error,relay=::ffff:190.41.211.156,from=<Julius@cgdbaieehi.vojnamirov.com>,to=<kucher@easyweb4you.de>: 550 User unknown.
Sep 13 19:49:06 service courieresmtpd: error,relay=::ffff:201.27.141.216,from=<eeghexq@alase.org>: 517-MX records for alase.org violate section 3.3.9 of RFC 1035.
Sep 13 19:49:06 service courieresmtpd: error,relay=::ffff:201.27.141.216,from=<eeghexq@alase.org>: 517 Invalid domain, see <URL:ftp://ftp.isi.edu/in-notes/rfc1035.txt>
Sep 13 20:13:25 service courieresmtpd: error,relay=::ffff:190.174.230.254,from=<Cynthia@echgfdaihi.vojnamirov.com>,to=<marlies@easyweb4you.de>: 550 User unknown.
Sep 13 20:17:28 service courieresmtpd: error,relay=::ffff:216.239.44.51,from=<googleplaces-noreply@google.com>,to=<info@billardsalon-spandau.de>: 550 User unknown.
Sep 13 21:18:42 service courieresmtpd: error,relay=::ffff:80.65.16.71,from=<nadejda@asi-nj.com>,to=<info@easyweb4you.de>: 550 User unknown.
Sep 13 21:23:23 service courieresmtpd: error,relay=::ffff:95.130.126.33,from=<tsuyoshi@catalog-mail.com>,to=<info@powerweb4you.de>: 550 User unknown.
Sep 13 21:38:03 service courieresmtpd: error,relay=::ffff:190.167.42.98,from=<Elliot@98.42.167.190.d.dyn.codetel.net.do>: 517-Domain does not exist: 98.42.167.190.d.dyn.codetel.net.do.
Sep 13 21:38:03 service courieresmtpd: error,relay=::ffff:190.167.42.98,from=<Elliot@98.42.167.190.d.dyn.codetel.net.do>: 517 Invalid domain, see <URL:ftp://ftp.isi.edu/in-notes/rfc1035.txt>
Sep 13 21:41:26 service courieresmtpd: error,relay=::ffff:122.169.213.61,from=<WatchesBestPrice10@yahoo.com>,to=<david@easyweb4you.de>: 550 User unknown.
Sep 13 21:42:18 service courieresmtpd: error,relay=::ffff:200.125.97.227,from=<WatchesBestPrice10@yahoo.com>,to=<david@easyweb4you.de>: 550 User unknown.
Sep 13 22:04:23 service courieresmtpd: error,relay=::ffff:209.239.47.205,from=<Tanya@bethanycenter.org>,to=<info@easyweb4you.de>: 550 User unknown.
Sep 13 22:11:29 service courieresmtpd: error,relay=::ffff:89.76.139.143,from=<Heath@ceaichajdh.qwerty777.com>,to=<support@easyweb4you.de>: 550 User unknown.
Sep 13 22:37:09 service courieresmtpd: error,relay=::ffff:189.82.36.210,from=<itrjkbrbdhve@annalsmed.org>,to=<itrem-euyus@laxmo.de>: 550 User unknown.
Sep 13 22:43:19 service courieresmtpd: error,relay=::ffff:80.65.16.71,from=<Lena@askdevelopment.org>,to=<info@easyweb4you.de>: 550 User unknown.
Sep 13 22:55:52 service courieresmtpd: error,relay=::ffff:91.211.172.108,from=<support@easyweb4you.de>,to=<support@easyweb4you.de>: 550 User unknown.
Sep 13 23:03:15 service courieresmtpd: error,relay=::ffff:88.80.202.197,from=<hagengleisner@aol.com>,to=<info@deutschesreich-online.de>: 513 Relaying denied.
Sep 13 23:08:15 service courieresmtpd: error,relay=::ffff:66.114.191.50,from=<njgupcbvduok@achh.org>,to=<gunnarssonkjn@easyweb4you.de>: 550 User unknown.
Sep 13 23:08:15 service courieresmtpd: error,relay=::ffff:66.114.191.50,from=<gernvivv@ablehome.org>,to=<jobst_kucher@easyweb4you.de>: 550 User unknown.
Sep 13 23:09:19 service courieresmtpd: error,relay=::ffff:66.114.191.50,from=<rvumnygq@a2zlearning.org>,to=<marlies@easyweb4you.de>: 550 User unknown.
Sep 14 00:16:27 service courieresmtpd: error,relay=::ffff:95.165.125.97,from=<anguishesm6@redstarpoker.com>,to=<info@urlaub-ribnitz.de>: 550 User unknown.
Sep 14 00:17:15 service courieresmtpd: error,relay=::ffff:95.165.125.97,from=<milieuxbs@rickrutgers.com>,to=<info@urlaub-ribnitz.de>: 550 User unknown.
Sep 14 00:20:27 service courieresmtpd: error,relay=::ffff:95.165.125.97,from=<pronounceablea9@rentschassociates.com>,to=<info@urlaub-ribnitz.de>: 550 User unknown.
Sep 14 00:34:59 service courieresmtpd: error,relay=::ffff:109.93.148.175,from=<morphemeaye1@rissksu.rivne.com>,to=<info@gold-uhren-studio.de>: 550 User unknown.
Sep 14 00:35:47 service courieresmtpd: error,relay=::ffff:109.93.148.175,from=<deepensyp34@robisonoil.com>,to=<info@gold-uhren-studio.de>: 550 User unknown.
Sep 14 00:39:00 service courieresmtpd: error,relay=::ffff:109.93.148.175,from=<inaccuracy27@remedassistance.com>,to=<info@gold-uhren-studio.de>: 550 User unknown.
Sep 14 01:16:05 service courieresmtpd: error,relay=::ffff:212.112.252.87,from=<226049778535470025dece1d@bounce.stayblue.de>: 517-Domain does not exist: bounce.stayblue.de.
Sep 14 01:16:05 service courieresmtpd: error,relay=::ffff:212.112.252.87,from=<226049778535470025dece1d@bounce.stayblue.de>: 517 Invalid domain, see <URL:ftp://ftp.isi.edu/in-notes/rfc1035.txt>
Sep 14 01:28:05 service courieresmtpd: error,relay=::ffff:202.153.227.130,from=<Wayne@202.153.227.130>: 517-Domain does not exist: 202.153.227.130.
Sep 14 01:28:05 service courieresmtpd: error,relay=::ffff:202.153.227.130,from=<Wayne@202.153.227.130>: 517 Invalid domain, see <URL:ftp://ftp.isi.edu/in-notes/rfc1035.txt>
Sep 14 01:28:05 service courieresmtpd: error,relay=::ffff:202.153.227.130,from=<Wayne@202.153.227.130>: 517-Domain does not exist: 202.153.227.130.
Sep 14 01:28:05 service courieresmtpd: error,relay=::ffff:202.153.227.130,from=<Wayne@202.153.227.130>: 517 Invalid domain, see <URL:ftp://ftp.isi.edu/in-notes/rfc1035.txt>
Sep 14 01:59:22 service courieresmtpd: error,relay=::ffff:95.130.125.191,from=<tamara@adultbestprice.de>,to=<david@easyweb4you.de>: 550 User unknown.
var/log/mail.log:
Code: Select all
Sep 14 01:37:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
Sep 14 01:37:14 service courierpop3login: LOGOUT, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:37:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:37:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:39:06 service courierd: SHUTDOWN: respawnlo limit reached, system inactive.
Sep 14 01:39:06 service courierd: Loading STATIC transport module libraries.
Sep 14 01:39:06 service courierd: Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Installing [0/0]
Sep 14 01:39:06 service courierd: Installing uucp
Sep 14 01:39:06 service courierd: Installed: module.uucp - Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Installing local
Sep 14 01:39:06 service courierd: Installed: module.local - Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Installing fax
Sep 14 01:39:06 service courierd: Installed: module.fax - Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Installing esmtp
Sep 14 01:39:06 service courierd: Installed: module.esmtp - Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Installing dsn
Sep 14 01:39:06 service courierd: Installed: module.dsn - Courier 0.53.3 Copyright 1999-2005 Double Precision, Inc.
Sep 14 01:39:06 service courierd: Initializing uucp
Sep 14 01:39:06 service courierd: Initializing local
Sep 14 01:39:06 service courierd: Initializing fax
Sep 14 01:39:06 service courierd: Initializing esmtp
Sep 14 01:39:06 service courierd: Initializing dsn
Sep 14 01:39:06 service courierd: Started ./courieruucp, pid=2606, maxdels=4, maxhost=4, maxrcpt=16
Sep 14 01:39:06 service courierd: Started ./courierlocal, pid=2607, maxdels=10, maxhost=4, maxrcpt=1
Sep 14 01:39:06 service courierd: Started ./courierfax, pid=2608, maxdels=1, maxhost=1, maxrcpt=1
Sep 14 01:39:06 service courierd: Started ./courieresmtp, pid=2609, maxdels=40, maxhost=4, maxrcpt=100
Sep 14 01:39:06 service courierd: Started ./courierdsn, pid=2610, maxdels=4, maxhost=1, maxrcpt=1
Sep 14 01:39:06 service courierd: queuelo=200, queuehi=400
Sep 14 01:39:06 service courierd: Purging /var/lib/courier/msgq
Sep 14 01:39:06 service courierd: Purging /var/lib/courier/msgs
Sep 14 01:39:06 service courierd: Waiting. shutdown time=Tue Sep 14 02:39:06 2010, wakeup time=Tue Sep 14 02:39:06 2010, queuedelivering=0, inprogress=0
Sep 14 01:42:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
Sep 14 01:42:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:42:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:47:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
Sep 14 01:47:14 service courierpop3login: LOGIN, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:47:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
Sep 14 01:47:14 service courierpop3login: LOGOUT, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:47:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:47:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:52:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
Sep 14 01:52:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:52:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:57:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
Sep 14 01:57:14 service courierpop3login: LOGIN, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:57:14 service courierpop3login: LOGOUT, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:57:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
Sep 14 01:57:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 01:57:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 01:59:13 service courieresmtpd: started,ip=[::ffff:95.130.125.191]
Sep 14 01:59:22 service courieresmtpd: error,relay=::ffff:95.130.125.191,from=<tamara@adultbestprice.de>,to=<david@easyweb4you.de>: 550 User unknown.
Sep 14 01:59:22 service courieresmtpd: error,relay=::ffff:95.130.125.191,msg="502 ESMTP command error",cmd: DATA
Sep 14 02:02:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
Sep 14 02:02:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:02:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:07:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
Sep 14 02:07:14 service courierpop3login: LOGIN, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:07:14 service courierpop3login: LOGOUT, user=ebay@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:07:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
Sep 14 02:07:14 service courierpop3login: LOGIN, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246]
Sep 14 02:07:14 service courierpop3login: LOGOUT, user=info@easyweb4you.de, ip=[::ffff:91.37.134.246], top=0, retr=0, rcvd=12, sent=39, time=0
Sep 14 02:12:14 service courierpop3login: Connection, ip=[::ffff:91.37.134.246]
/var/log/auth.log:
Code: Select all
Sep 13 22:39:01 service CRON[20581]: (pam_unix) session opened for user root by (uid=0)
Sep 13 22:39:01 service CRON[20581]: (pam_unix) session closed for user root
Sep 13 22:40:01 service CRON[20595]: (pam_unix) session opened for user www-data by (uid=0)
Sep 13 22:40:01 service CRON[20595]: (pam_unix) session closed for user www-data
Sep 13 22:44:15 service sshd[20600]: Address 94.53.198.102 maps to 94-53-198-102.static.newcom.ro, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 13 22:44:15 service sshd[20600]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.53.198.102 user=root
Sep 13 22:44:17 service sshd[20600]: Failed password for root from 94.53.198.102 port 58767 ssh2
Sep 13 22:44:18 service sshd[20602]: Address 94.53.198.102 maps to 94-53-198-102.static.newcom.ro, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 13 22:44:18 service sshd[20602]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.53.198.102 user=root
Sep 13 22:44:20 service sshd[20602]: Failed password for root from 94.53.198.102 port 59049 ssh2
Sep 13 22:44:20 service sshd[20604]: Address 94.53.198.102 maps to 94-53-198-102.static.newcom.ro, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 13 22:44:20 service sshd[20604]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.53.198.102 user=root
Sep 13 22:44:22 service sshd[20604]: Failed password for root from 94.53.198.102 port 59251 ssh2
Sep 13 22:44:23 service sshd[20606]: Address 94.53.198.102 maps to 94-53-198-102.static.newcom.ro, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 13 22:44:23 service sshd[20606]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.53.198.102 user=root
Sep 13 22:44:24 service sshd[20606]: Failed password for root from 94.53.198.102 port 59484 ssh2
Sep 13 22:44:24 service sshd[20608]: Address 94.53.198.102 maps to 94-53-198-102.static.newcom.ro, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 13 22:44:24 service sshd[20608]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.53.198.102 user=root
Sep 13 22:44:27 service sshd[20608]: Failed password for root from 94.53.198.102 port 59628 ssh2
Sep 13 22:44:27 service sshd[20610]: Address 94.53.198.102 maps to 94-53-198-102.static.newcom.ro, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 13 22:44:27 service sshd[20610]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.53.198.102 user=root
Sep 13 22:44:30 service sshd[20610]: Failed password for root from 94.53.198.102 port 59870 ssh2
Sep 13 22:44:30 service sshd[20612]: Address 94.53.198.102 maps to 94-53-198-102.static.newcom.ro, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 13 22:44:30 service sshd[20612]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.53.198.102 user=root
Sep 13 22:44:32 service sshd[20612]: Failed password for root from 94.53.198.102 port 60146 ssh2
Sep 13 22:50:01 service CRON[20622]: (pam_unix) session opened for user www-data by (uid=0)
Sep 13 22:50:01 service CRON[20622]: (pam_unix) session closed for user www-data
Sep 13 23:00:01 service CRON[20633]: (pam_unix) session opened for user root by (uid=0)
Sep 13 23:00:01 service CRON[20635]: (pam_unix) session opened for user root by (uid=0)
Sep 13 23:00:01 service CRON[20637]: (pam_unix) session opened for user root by (uid=0)
Sep 13 23:00:01 service CRON[20638]: (pam_unix) session opened for user www-data by (uid=0)
Sep 13 23:00:01 service CRON[20638]: (pam_unix) session closed for user www-data
Sep 13 23:00:02 service CRON[20637]: (pam_unix) session closed for user root
Sep 13 23:00:02 service CRON[20633]: (pam_unix) session closed for user root
Sep 13 23:00:02 service CRON[20635]: (pam_unix) session closed for user root
Sep 13 23:09:01 service CRON[20735]: (pam_unix) session opened for user root by (uid=0)
Sep 13 23:09:01 service CRON[20735]: (pam_unix) session closed for user root
Sep 13 23:10:01 service CRON[20751]: (pam_unix) session opened for user www-data by (uid=0)
Sep 13 23:10:01 service CRON[20751]: (pam_unix) session closed for user www-data
Sep 13 23:17:01 service CRON[20755]: (pam_unix) session opened for user root by (uid=0)
Sep 13 23:17:01 service CRON[20755]: (pam_unix) session closed for user root
Sep 13 23:19:42 service sshd[20760]: Address 201.248.92.232 maps to 201-248-92-232.dyn.dsl.cantv.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 13 23:19:42 service sshd[20760]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.248.92.232 user=root
Sep 13 23:19:44 service sshd[20760]: Failed password for root from 201.248.92.232 port 42454 ssh2
Sep 13 23:20:01 service CRON[20762]: (pam_unix) session opened for user www-data by (uid=0)
Sep 13 23:20:01 service CRON[20762]: (pam_unix) session closed for user www-data
Sep 13 23:30:01 service CRON[20769]: (pam_unix) session opened for user root by (uid=0)
Sep 13 23:30:01 service CRON[20771]: (pam_unix) session opened for user root by (uid=0)
Sep 13 23:30:01 service CRON[20773]: (pam_unix) session opened for user root by (uid=0)
Sep 13 23:30:01 service CRON[20774]: (pam_unix) session opened for user www-data by (uid=0)
Sep 13 23:30:01 service CRON[20774]: (pam_unix) session closed for user www-data
Sep 13 23:30:02 service CRON[20773]: (pam_unix) session closed for user root
Sep 13 23:30:03 service CRON[20769]: (pam_unix) session closed for user root
Sep 13 23:30:03 service CRON[20771]: (pam_unix) session closed for user root
Sep 13 23:39:01 service CRON[20868]: (pam_unix) session opened for user root by (uid=0)
Sep 13 23:39:01 service CRON[20868]: (pam_unix) session closed for user root
Sep 13 23:40:01 service CRON[20882]: (pam_unix) session opened for user www-data by (uid=0)
Sep 13 23:40:01 service CRON[20882]: (pam_unix) session closed for user www-data
Sep 13 23:50:01 service CRON[20887]: (pam_unix) session opened for user www-data by (uid=0)
Sep 13 23:50:01 service CRON[20887]: (pam_unix) session closed for user www-data
Sep 14 00:00:01 service CRON[20892]: (pam_unix) session opened for user root by (uid=0)
Sep 14 00:00:01 service CRON[20894]: (pam_unix) session opened for user root by (uid=0)
Sep 14 00:00:01 service CRON[20896]: (pam_unix) session opened for user root by (uid=0)
Aber ich denke, wenn hier ein erfahrener User keinen Zugriff auf meinen Server hat, wird er mit diesen wenigen Informationen nicht viel anfangen und mir letzten Endes auch nicht helfen können.
Ich danke bisweilen.
Gruß Udo