[vps-mail] Issue re sendmail/ abuse (attempted relay????)

[Abigail Marshall <webmaster@xxxxxxxxxxxx>]

Here's the problem - I noticed that my messages file had a
lot of entries like this:

><XX>Aug 21 15:00:17 sendmail[65008]: h7LL0HNA065008:
>[200.3.224.50] did not issue MAIL/EXPN/VRFY/ETRN during
>connection to stdin

About 1270 entries, at the rate of about 3 or 4 per minute.
This is from 2:00 am last night - 13 hours - so basically
it's about 100 hits per hour.

There is no reverse DNS for that IP, which appears to
originate from some ISP in Brazil.

I added that IP to the Access file.

Now I have a bunch of messages that look like this, still
coming at the rate of 3 or 4 per minute. (So far, there are
182 entries)

> <XX>Aug 21 15:56:47 sendmail[76638]: ruleset=check_relay,
> arg1=[200.3.224.50], arg2=200.3.224.50,
> relay=[200.3.224.50], reject=550 5.7.1 ABUSE IP blocked

OK, so what it looks like I have done is succeeded in
changing the error message that Sendmail generates, but this
clown still hasn't gotten the message that our server won't
let him in.

Is there anything else I can do? I'm wondering how this sort
of stuff impacts overall server load and performance of
Sendmail.

Anyway, just wondering if there is anything else I can do.
(I did test the IP at abuse.net and it is not an open relay
- I doubt that writing to the Brazilian ISP is going to do
me much good)

-Abigail

======================================================================
Technical questions regarding this list may be sent to
<vps-mail-owner@xxxxxxxxxxxx>. You may request an automated help
response by sending an email with the word 'help' (w/o quotes) in the
BODY of the message (subject is ignored) to <vps-mail-request@xxxxxxxxxxxx>.
======================================================================