Odd entries in smtp log for one of our lists
![](https://secure.gravatar.com/avatar/8a24d0fcf13347755847334aaa969476.jpg?s=120&d=mm&r=g)
One of our list owners got an odd notice from our institutional email security/spam management system (Mimecast) for a bounced email from her list. She was a bit confused because she hadn’t sent anything to the list (it operates as an announcement list, everyone is moderated) since Nov 26.
Your message couldn't be delivered
The message you sent to tvanhassel@yumaregional.org<mailto:tvanhassel@yumaregional.org> couldn't be delivered due to: Recipient email server rejected the message.
Further information
5.7.1 Filter Rule 19 - BLANK E-MAIL FILTER (Filter Macro 2977)
If you sent this message to multiple addresses, you'll receive a notification like this for every one that didn't arrive.
When I went poking through the logs I found a bunch of notices in the smtp logs that look like this, that I cannot connect to a message ID...
smtp:Dec 12 15:57:46 2024 (1200) <mailman.0.1734044265.3351215.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.087 seconds
smtp:Dec 13 08:48:10 2024 (1200) <mailman.0.1734104889.3402091.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.119 seconds
smtp:Dec 13 08:50:47 2024 (1200) <mailman.0.1734105046.3402213.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.118 seconds
smtp:Dec 13 08:52:53 2024 (1200) <mailman.0.1734105172.3402319.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.136 seconds
smtp:Dec 13 08:54:06 2024 (1200) <mailman.0.1734105245.3402387.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.087 seconds
smtp:Dec 13 08:55:49 2024 (1200) <mailman.0.1734105349.3402468.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.109 seconds
smtp:Dec 13 08:56:58 2024 (1200) <mailman.0.1734105417.3402529.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.088 seconds
smtp:Dec 13 08:59:37 2024 (1200) <mailman.0.1734105576.3402651.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.118 seconds
smtp:Dec 13 08:59:59 2024 (1200) <mailman.0.1734105598.3402676.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.087 seconds
smtp:Dec 13 09:00:33 2024 (1200) <mailman.0.1734105631.3402823.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.087 seconds
smtp:Dec 13 09:03:00 2024 (1200) <mailman.0.1734105779.3402959.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.119 seconds
smtp:Dec 13 09:17:29 2024 (1200) <mailman.0.1734106648.3403725.preceptors@lists.pharmacy.arizona.edu> smtp to preceptors for 1 recips, completed in 0.100 seconds
These do not look like normal smtp entries; the last one for this particular list was on Nov 26 and looks normal:
smtp-20241201:Nov 26 12:32:27 2024 (1200) <CY5PR19MB63373BA001AA415698B3D026E02F2@CY5PR19MB6337.namprd19.prod.outlook.com> smtp to preceptors for 1202 recips, completed in 0.989 seconds
Are these retry entries for failed deliveries? Or should I be concerned this is some sort of attack on our list server?
(we’re using Postfix for an MTA)
-- Bruce Johnson University of Arizona College of Pharmacy Information Technology Group
Institutions do not have opinions, merely customs
![](https://secure.gravatar.com/avatar/56f108518d7ee2544412cc80978e3182.jpg?s=120&d=mm&r=g)
On 12/13/24 09:19, Johnson, Bruce E - (bjohnson) wrote:
One of our list owners got an odd notice from our institutional email security/spam management system (Mimecast) for a bounced email from her list. She was a bit confused because she hadn’t sent anything to the list (it operates as an announcement list, everyone is moderated) since Nov 26.
These mailman generated messages to one recipient are normal occurrences. They could be responses to email commands, address confirmation requests for attempted subscribes, confirmation requests for unsubscription requests, etc.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
![](https://secure.gravatar.com/avatar/56f108518d7ee2544412cc80978e3182.jpg?s=120&d=mm&r=g)
On 12/13/24 09:19, Johnson, Bruce E - (bjohnson) wrote:
One of our list owners got an odd notice from our institutional email security/spam management system (Mimecast) for a bounced email from her list. She was a bit confused because she hadn’t sent anything to the list (it operates as an announcement list, everyone is moderated) since Nov 26.
These mailman generated messages to one recipient are normal occurrences. They could be responses to email commands, address confirmation requests for attempted subscribes, confirmation requests for unsubscription requests, etc.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
participants (2)
-
Johnson, Bruce E - (bjohnson)
-
Mark Sapiro