[Mailman-Users] Bouncing a user repeatedly.

[Mark Sapiro]

P.I.Julius wrote:

>On Wed, 2006-03-29 at 13:29 -0800, Mark Sapiro wrote: 
>> P.I.Julius wrote:
>> >
>> >As you can see the bounce is sent out from fk-bounces at lists.hndomain.org
>> >to cva34.internetdsl.tpnet.pl at lists.hndomain.org but we don't have such an
>> >user on our server, so why do we get all this emails sent out? it happens
>> >every seconds, so it really uses a lot of cpu resources.
>> 
<snip>
>> 
>> Look at your Mailman logs 'post', 'smtp' and 'smtp-failure' and at the
>> contents of Mailman's qfiles/retry/ directory (queue) for clues.
>> 
>
>I don't have anything in the qfiles/retry, I don't even have a retry
>directory (/var/mailman/qfiles), but I took a look on the post, smtp,
>smtp-failure and there is a lot of failure messages:
>
>Mar 30 09:26:45 2006 (747) delivery to
>p43n152.172.63.ruraltel.net at lists.hndomain.org failed with code 450:
><p43n152.172.63.ruraltel.net at lists.hndomain.org>: User unknown in local
>recipient table
>Mar 30 09:26:46 2006 (747) delivery to
>p43n152.172.63.ruraltel.net at lists.hndomain.org failed with code 450:
><p43n152.172.63.ruraltel.net at lists.hndomain.org>: User unknown in local
>recipient table
>Mar 30 09:26:47 2006 (747) delivery to
>p43n152.172.63.ruraltel.net at lists.hndomain.org failed with code 450:
><p43n152.172.63.ruraltel.net at lists.hndomain.org>: User unknown in local
>recipient table
>
>and so on.
>
>As you can see now I have a different email, so I have no idea what it
>could be.


This is strange on a couple of counts. bout of the above email
addresses have local parts that look like domain names and domains
equal to yours.

This may say that Mailman is actually trying to send just to
cva34.internetdsl.tpnet.pl or p43n152.172.63.ruraltel.net. This may be
some loop involved in rejecting messages or some kind of 'denial of
service' attack on your server. You never mentioned messages incomming
to Mailman. Are there any?

If you look at the list's Privacy options generic_nonmember_action and
header_filter_rules actions if any, are these set to Reject? If so,
try changing them to Hold or Discard and see what happens (Hold will
give more information if this is the problem).

-- 
Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan